CVE-2007-3247: Virtuemart

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in VirtueMart before 1.0.11 allows remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly related to improper input validation of the PATH_INFO (PHP_SELF) by virtuemart_parser.php.

Affected products

• Virtuemart Virtuemart: up to and including 1.0.9

Published 2007-06-18. Last modified 2026-06-16.