Component Type: VirtueMart Core. The affected files are part of the standard VirtueMart Distribution.
Affected Versions: VirtueMart Version 1.1.4 and all versions below.
Vulnerability Type: SQL Injection.
Severity: HIGH.
Problem Description: It's possible for an attacker with administrator permissions to manipulate or gain information from the database with a specially crafted URL.
Solution: Update to VirtueMart 1.1.5.
General advice:
Follow the recommendations from the Joomla! Administrator's Security Checklist and the Security & Performance FAQ for Joomla!. This way you get basic security for your Store.
Keep notice of the VirtueMart Security Bulletins.
Discover VirtueMart's Features
Powering Your E-commerce Experience
-
Flexible Product Management:
VirtueMart enables easy management of products, categories, attributes, and variants, allowing administrators to efficiently organize and showcase their merchandise.
-
Multi-Language Support:
With built-in multi-language support, VirtueMart caters to international markets, allowing users to create and manage multilingual online stores.
-
Multiple Payment Gateways:
VirtueMart supports various payment gateways, including PayPal, Stripe, Authorize.Net, and more, offering flexibility in accepting payments securely.
-
Shipping and Tax Calculation:
The platform provides tools for calculating shipping costs and taxes based on different parameters such as weight, destination, and tax rates, streamlining the checkout process.
-
Inventory Management:
VirtueMart offers inventory management features, including stock tracking, low-stock notifications, and backorder management, helping users keep track of their inventory levels.
-
SEO-Friendly:
The platform is designed with search engine optimization (SEO) in mind, providing features such as customizable URLs, meta tags, and sitemaps to improve online visibility and rankings.
-
Extensions and Add-ons:
VirtueMart offers a wide range of extensions and add-ons, allowing users to extend the functionality of their online store with additional features and integrations.
-
Important Security and Bugfix release 4.4.10
Whats going on here? 3rd security release within 6 months? Yes that is unusual, but better the leaks are found and closed than wrong safety feeling. In this special case we provide also the fix for old installations. It should work for any installation higher than vm3.6 DOWNLOAD VirtueMart 4.4.10NOW DOWNLOAD Hotfix for VM3.6 - VM4.4.8 Features: We added a new function checkByShowColumns which executes a basic check based on the table definition for data to be stored in the db...
