Critical
CVSS: 9.8
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.
High
CVSS: 7.5
givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.
Critical
CVSS: 9.8
givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.
Critical
CVSS: 9.1
A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Forgery (SSRF) and arbitrary file reading. The vulnerability stems from improper handling of user-supplied URLs in the "file_get_con…
Low
CVSS: 2.3
A vulnerability, which was classified as critical, was found in givanz Vvvebjs up to 2.0.4. Affected is an unknown function of the file /save.php of the component node.js. The manipulation of the argument File leads to path traversal. It is…