CNNVD-202506-1619 Information

CNNVD ID

CNNVD-202506-1619

CVE-2025-6001

  • CNNVD Published: 2025-06-11

Description (Chinese)

VirtueMart是VirtueMart公司的一款开源电子商务应用程序,旨在作为 Mambo 或 Joomla! 的扩展。 VirtueMart存在安全漏洞,该漏洞源于跨站请求伪造保护绕过,可能导致任意文件上传。

Description (English)

VirtueMart is an open-source e-commerce application of VirtueMart, which is intended as an extension of Mambo or Joomla! There is a security loophole in VirtueMart, which stems from cross-site requests for false protection bypasses, which may lead to the uploading of documents at random.

Hazard Level

Medium

Vulnerability Type

跨站请求伪造

Affected Vendor

VirtueMart

Published

2025-06-11

Last Modified

2026-02-24

References

https://blog.blacklanternsecurity.com/p/doomla-zero-days https://nvd.nist.gov/vuln/detail/CVE-2025-6001

Share on: