| Reporter | Title | Published | Views | Family All 18 |
|---|---|---|---|---|
 | Exploit for Injection in Vvveb | 29 Sep 202516:51 | – | githubexploit |
 | CVE-2025-8518 | 29 Sep 202516:59 | – | circl |
 | Vvveb injection vulnerability | 4 Aug 202500:00 | – | cnnvd |
 | CVE-2025-8518 givanz Vvveb Code Editor code.php save code injection | 4 Aug 202517:02 | – | cvelist |
 | EUVD-2025-23521 | 3 Oct 202520:07 | – | euvd |
 | CVE-2025-8518 | 29 Oct 202601:40 | – | kitploit |
| Vvveb-CMS-CVE-2025-8518 | 28 Oct 202608:40 | – | kitploit |
 | CVE-2025-8518 | 4 Aug 202517:02 | – | mend |
 | Remote Code Execution Vulnerability in Vvveb | 10 Jan 202500:00 | – | metasploit |
 | CVE-2025-8518 | 4 Aug 202517:15 | – | nvd |
10
[
{
"vendor": "givanz",
"product": "Vvveb",
"versions": [
{
"version": "1.0.5",
"status": "affected"
},
{
"version": "1.0.6",
"status": "unaffected"
}
],
"modules": [
"Code Editor"
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| module=editor/code | query param | /admin/index.php | Code injection via the Code Editor functionality where unsanitized input allows writing arbitrary PHP code to server files. | CWE-74, CWE-94 |
| action=save | query param | /admin/index.php | Code injection via the Code Editor functionality where unsanitized input allows writing arbitrary PHP code to server files. | CWE-74, CWE-94 |
| type=themes | query param | /admin/index.php | Code injection via the Code Editor functionality where unsanitized input allows writing arbitrary PHP code to server files. | CWE-74, CWE-94 |
| file=theme_path | query param | /admin/index.php | Code injection via the Code Editor functionality where unsanitized input allows writing arbitrary PHP code to server files. | CWE-74, CWE-94 |
| module=editor/code | query param | /admin/index.php | Unsanitized input in the Code Editor's file loading functionality. | CWE-74, CWE-94 |
| action=loadFile | query param | /admin/index.php | Unsanitized input in the Code Editor's file loading functionality. | CWE-74, CWE-94 |
| type=themes | query param | /admin/index.php | Unsanitized input in the Code Editor's file loading functionality. | CWE-74, CWE-94 |
| file=theme_path | query param | /admin/index.php | Unsanitized input in the Code Editor's file loading functionality. | CWE-74, CWE-94 |
| admin | query param | /cli.php | Remote Code Execution via cli.php which allows authentication bypass (via admin parameter) and execution of administrative functions with unfiltered input. | CWE-74, CWE-94 |
| module | query param | /cli.php | Remote Code Execution via cli.php which allows authentication bypass (via admin parameter) and execution of administrative functions with unfiltered input. | CWE-74, CWE-94 |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 10:07Current
4.8Medium risk
Vulners AI Score4.8
CVSS 3.14.7 - 7.2
CVSS 34.7
CVSS 45.1
CVSS 25.8
EPSS0.02307
SSVC