CVE-2025-11944 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Ra…
Medium CVSS: 5.1

CVE-2025-11944

A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 52204b4a106b2fb02d16eee06a88a1f2697f9b35. It is recommended to apply a patch to fix this issue.
Vendor
Vvveb
Product
Vvveb
CWE
CWE-74
Yayın Tarihi
2025-10-19 20:15:36
Güncelleme
2026-02-24 08:16:18
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 Vvveb MEDIUM Vvveb 2025

Referanslar

https://github.com/givanz/Vvveb/ https://github.com/givanz/Vvveb/commit/52204b4a106b2fb02d16eee06a88a1f2697f9b35 https://github.com/givanz/Vvveb/issues/332 https://github.com/givanz/Vvveb/issues/332#issue-3505043543 https://vuldb.com/?ctiid.329024 https://vuldb.com/?id.329024 https://vuldb.com/?submit.673129