Vulnerability Description
A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 52204b4a106b2fb02d16eee06a88a1f2697f9b35. It is recommended to apply a patch to fix this issue.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vvveb | Vvveb | <= 1.0.7.3 |
Related Weaknesses (CWE)
References
- https://github.com/givanz/Vvveb/
- https://github.com/givanz/Vvveb/commit/52204b4a106b2fb02d16eee06a88a1f2697f9b35Patch
- https://github.com/givanz/Vvveb/issues/332ExploitIssue Tracking
- https://github.com/givanz/Vvveb/issues/332#issue-3505043543ExploitThird Party Advisory
- https://vuldb.com/?ctiid.329024Permissions RequiredVDB Entry
- https://vuldb.com/?id.329024Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.673129Third Party AdvisoryVDB Entry
FAQ
What is CVE-2025-11944?
CVE-2025-11944 is a vulnerability with a CVSS score of 4.7 (MEDIUM). A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes ...
How severe is CVE-2025-11944?
CVE-2025-11944 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-11944?
Check the references section above for vendor advisories and patch information. Affected products include: Vvveb Vvveb.