Vvveb

Vvveb

16 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2025-8521

Exploit
  • EPSS 0.08%
  • Veröffentlicht 04.08.2025 18:32:06
  • Zuletzt bearbeitet 27.08.2025 16:21:12

A vulnerability, which was classified as problematic, has been found in givanz Vvveb up to 1.0.5. This issue affects some unknown processing of the file /vadmin123/index.php?module=settings/post-types of the component Add Type Handler. The manipulati...

5.8

CVE-2025-8520

Exploit
  • EPSS 0.13%
  • Veröffentlicht 04.08.2025 18:02:06
  • Zuletzt bearbeitet 27.08.2025 16:21:35

A vulnerability classified as critical was found in givanz Vvveb up to 1.0.5. This vulnerability affects unknown code of the file /vadmin123/?module=editor/editor of the component Drag-and-Drop Editor. The manipulation of the argument url leads to se...

5.1

CVE-2025-8519

Exploit
  • EPSS 0.09%
  • Veröffentlicht 04.08.2025 17:32:06
  • Zuletzt bearbeitet 27.08.2025 16:21:44

A vulnerability classified as problematic has been found in givanz Vvveb up to 1.0.5. This affects an unknown part of the file /vadmin123/index.php?module=editor/editor of the component Drag-and-Drop Editor. The manipulation of the argument url leads...

7.2

CVE-2025-8518

Exploit
  • EPSS 33.9%
  • Veröffentlicht 04.08.2025 17:02:06
  • Zuletzt bearbeitet 27.08.2025 16:22:16

A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attac...

6.5

CVE-2025-8517

Exploit
  • EPSS 0.16%
  • Veröffentlicht 04.08.2025 16:15:35
  • Zuletzt bearbeitet 27.08.2025 16:23:54

A vulnerability was detected in givanz Vvveb 1.0.6.1. Impacted is an unknown function. The manipulation results in session fixiation. The attack can be launched remotely. The exploit is now public and may be used. Upgrading to version 1.0.7 is recomm...

9.8

CVE-2025-44022

Exploit
  • EPSS 1.32%
  • Veröffentlicht 12.05.2025 00:00:00
  • Zuletzt bearbeitet 23.06.2025 19:15:17

An issue in vvveb CMS v.1.0.6 allows a remote attacker to execute arbitrary code via the Plugin mechanism.