CVE-2006-2980

critical

Description

SQL injection vulnerability in block_forum_topic_new.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, might allow remote attackers to execute arbitrary SQL commands via unknown vectors, probably involving the forum_id parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27684

http://www.codetosell.com/downloads/xss_fix.zip

http://www.attrition.org/pipermail/vim/2006-June/000846.html

Details

Source: Mitre, NVD

Published: 2006-06-12

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00468