CVE-2007-0376

Cross-site scripting (XSS) vulnerability in Virtuemart 1.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.htmlVendor Advisory
• http://secunia.com/advisories/24058
• http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/branches/virtuemart-1_0_0/virtuemart/CHANGELOG.php?revision=607
• http://www.hackers.ir/advisories/festival.txtVendor Advisory
• http://www.securityfocus.com/archive/1/459195/100/0/threaded
• http://www.securityfocus.com/bid/22123Vendor Advisory
• http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.htmlVendor Advisory
• http://secunia.com/advisories/24058
• http://virtuemart.svn.sourceforge.net/viewvc/%2Acheckout%2A/virtuemart/branches/virtuemart-1_0_0/virtuemart/CHANGELOG.php?revision=607
• http://www.hackers.ir/advisories/festival.txtVendor Advisory
• http://www.securityfocus.com/archive/1/459195/100/0/threaded
• http://www.securityfocus.com/bid/22123Vendor Advisory

Published

Jan 19, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0370Unrestricted file upload vulnerability in index.php in phpBP…
• CVE-2007-0371A certain ActiveX control in the Common Controls Replacement…
• CVE-2007-0372Multiple SQL injection vulnerabilities in Francisco Burzi PH…
• CVE-2007-0373Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta…
• CVE-2007-0374SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Be…
• CVE-2007-0375Joomla! 1.5.0 Beta allows remote attackers to obtain sensiti…
• CVE-2007-0377Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow…
• CVE-2007-0378Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 all…
• CVE-2007-0379Cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 a…
• CVE-2007-0380DocMan 1.3 RC2 allows remote attackers to obtain sensitive i…
• CVE-2007-0381Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 all…
• CVE-2007-0382Multiple SQL injection vulnerabilities in letterman.class.ph…