CVE-2016-10379: The VirtueMart com_virtuemart component 3.0.14 for Joomla!

Security readout for executives and security teams

This issue affects Joomla sites using VirtueMart com_virtuemart 3.0.14. A logged-in administrator could trigger SQL injection through payment or shipment method parameters. The business risk is database exposure or alteration if an administrator account is misused. Public unauthenticated exploitation is not described in the provided sources. Exposure is likely limited to Joomla deployments running VirtueMart com_virtuemart 3.0.14 where administrator access exists. Risk increases if admin accounts are shared, weakly protected, or compromised. Prioritize remediation where VirtueMart 3.0.14 supports sensitive commerce data or has broadly accessible administrator login. Urgency is lower than unauthenticated internet-facing SQL injection, but compromised admin access could still affect business-critical data. Mitigation focus: Identify Joomla sites using VirtueMart com_virtuemart 3.0.14.; Check VirtueMart and Joomla vendor guidance for fixed versions or mitigations.; Restrict administrator access to trusted users and networks where feasible..

Prepared

Jun 13, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.