VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 12, 2006· Updated Jun 16, 2026

CVE-2006-2980

CVE-2006-2980

Description

SQL injection vulnerability in block_forum_topic_new.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, might allow remote attackers to execute arbitrary SQL commands via unknown vectors, probably involving the forum_id parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Viart/Shop Free4 versions
    cpe:2.3:a:viart_ltd:viart_shop_free:2.5.5_enterprise:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:viart_ltd:viart_shop_free:2.5.5_enterprise:*:*:*:*:*:*:*
    • cpe:2.3:a:viart_ltd:viart_shop_free:2.5.5_light:*:*:*:*:*:*:*
    • cpe:2.3:a:viart_ltd:viart_shop_free:2.5.5_standard:*:*:*:*:*:*:*
    • (no CPE)range: =2.5.5

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.