Lucene search
+L

316 matches found

Kitploit
Kitploit
added 2026/09/03 3:12 p.m.4 views

Session-Fixation-in-Vvveb-CMS-v1.0.6.1

Fijación de Sesión en Vvveb CMS v1.0.6.1 Autor: Andrew Paul Fecha de Descubrimiento: 9 de junio de 2025 Vendedor: Vvveb URL del Vendedor: http://vvveb.com GitHub del Vendedor: https://github.com/givanz/Vvveb Versión Afectada: 1.0.6.1 y probablemente versiones anteriores ID CVE: CVE-2025-8517...

6.5CVSS6.6AI score0.00679EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/03 10:58 a.m.3 views

Reflected-XSS-in-Vvveb-CMS-v1.0.7.2

XSS Reflejado en el Formulario de Inicio de Sesión Campos de Correo Electrónico y Contraseña Vvveb CMS v1.0.7.2 Autor: Andrew Paul Fecha de descubrimiento: 12 de agosto de 2025 Proveedor: Vvveb URL del proveedor: http://vvveb.com GitHub del proveedor: https://github.com/givanz/Vvveb Versión...

6.1CVSS5.9AI score0.00379EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/31 12:22 p.m.2 views

Vvveb-CMS-CVE-2025-8518

Vvveb-CMS-CVE-2025-8518 Este repositorio contiene una Prueba de Concepto PoC que demuestra una vulnerabilidad crítica en givanz Vvveb 1.0.5. La vulnerabilidad permite a un usuario autenticado con privilegios de edición de plantillas escribir código PHP arbitrario en archivos del servidor, lo que...

7.2CVSS5.8AI score0.01406EPSS
SaveExploits6
NVD
NVD
added 2026/08/18 5:16 p.m.9 views

CVE-2026-49225

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product revision operations allow a low-privileged Vendor to access revisions for products owned by another Vendor. The admin/controller/product/revisions.php...

8.3CVSS0.00424EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/18 5:16 p.m.10 views

CVE-2026-49228

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product operations allow a low-privileged Vendor to access products owned by another Vendor. The admin/controller/product/products.php controller accepts a...

8.8CVSS0.0038EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/18 5:16 p.m.8 views

CVE-2026-49222

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product question operations allow a low-privileged Vendor to manage questions under another Vendor's products. The admin/sql/sqlite/productquestion.sql queries...

7.6CVSS0.00298EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/18 5:16 p.m.6 views

CVE-2026-49223

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product review operations allow a low-privileged Vendor to manage reviews under another Vendor's products. The admin/sql/sqlite/productreview.sql queries accept ...

7.6CVSS0.00298EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/18 5:16 p.m.5 views

CVE-2026-49224

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The admin/controller/content/revisions.php controll...

8.3CVSS0.00424EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/18 4:18 p.m.8 views

CVE-2026-49223 Vvveb product review authorization bypass allows Vendors to read, approve, edit, or delete reviews under other Vendors' products

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product review operations allow a low-privileged Vendor to manage reviews under another Vendor's products. The admin/sql/sqlite/productreview.sql queries accept ...

7.6CVSS5.5AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/08/18 4:18 p.m.23 views

CVE-2026-49223

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product review operations allow a low-privileged Vendor to manage reviews under another Vendor's products. The admin/sql/sqlite/productreview.sql queries accept ...

7.6CVSS5.4AI score0.00298EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2026/08/18 4:18 p.m.9 views

EUVD-2026-61039

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product review operations allow a low-privileged Vendor to manage reviews under another Vendor's products. The admin/sql/sqlite/productreview.sql queries accept ...

7.6CVSS5.4AI score0.00298EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/18 4:18 p.m.25 views

CVE-2026-49223

Vvveb CMS (versions before 1.0.8.4) has an authorization bypass in admin/sql/sqlite/product_review.sql, which accepts a caller-controlled product_review_id without verifying ownership against the current admin's admin_id. A low-privileged Vendor can read, edit, approve, or delete reviews under an...

7.6CVSS5.4AI score0.00298EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/18 4:18 p.m.23 views

CVE-2026-49223 Vvveb product review authorization bypass allows Vendors to read, approve, edit, or delete reviews under other Vendors' products

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product review operations allow a low-privileged Vendor to manage reviews under another Vendor's products. The admin/sql/sqlite/productreview.sql queries accept ...

7.6CVSS0.00298EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/18 4:17 p.m.10 views

EUVD-2026-61038

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The admin/controller/content/revisions.php controll...

8.3CVSS5.3AI score0.00424EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/18 4:17 p.m.26 views

CVE-2026-49224

CVE-2026-49224 is an authorization bypass in Vvveb CMS (prior to 1.0.8.4) affecting post revision operations. The admin/controller/content/revisions.php controller and admin/sql/sqlite/post_content_revision.sql queries trust caller-controlled post_id, language_id, and created_at values without co...

8.3CVSS5.3AI score0.00424EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/18 4:17 p.m.21 views

CVE-2026-49224 Vvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisions

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The admin/controller/content/revisions.php controll...

8.3CVSS0.00424EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/18 4:17 p.m.21 views

CVE-2026-49224

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The admin/controller/content/revisions.php controll...

8.3CVSS5.3AI score0.00424EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/08/18 4:17 p.m.9 views

CVE-2026-49224 Vvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisions

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The admin/controller/content/revisions.php controll...

8.3CVSS5.5AI score
SaveExploits0References5
NVD
NVD
added 2026/08/18 4:17 p.m.6 views

CVE-2026-49226

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post operations allow a low-privileged Author to access posts owned by another Author. The admin/controller/content/posts.php controller permits filteradminid to...

8.3CVSS0.00331EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/18 4:17 p.m.8 views

CVE-2026-49221

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend digital asset operations allow a low-privileged Vendor to access digital assets linked to another Vendor's products. The admin/controller/product/digital-asset.p...

8.8CVSS0.0038EPSS
SaveExploits0References3
Rows per page
Query Builder