Lucene search
+L

316 matches found

Kitploit
Kitploit
added 2026/09/03 3:12 p.m.4 views

Session-Fixation-in-Vvveb-CMS-v1.0.6.1

تثبيت الجلسة في Vvveb CMS الإصدار 1.0.6.1 المؤلف: Andrew Paul تاريخ الاكتشاف: 9 يونيو 2025 البائع: Vvveb رابط البائع: http://vvveb.com GitHub البائع: https://github.com/givanz/Vvveb الإصدار المتأثر: 1.0.6.1 والإصدارات السابقة على الأرجح معرف CVE: CVE-2025-8517 الملخص تم اكتشاف ثغرة تثبيت الجلسة،...

6.5CVSS6.6AI score0.00679EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/03 10:58 a.m.3 views

Reflected-XSS-in-Vvveb-CMS-v1.0.7.2

XSS منعكسة في نموذج تسجيل الدخول حقول البريد الإلكتروني وكلمة المرور Vvveb CMS الإصدار 1.0.7.2 المؤلف: Andrew Paul تاريخ الاكتشاف: 12 أغسطس 2025 البائع: Vvveb رابط البائع: http://vvveb.com GitHub البائع: https://github.com/givanz/Vvveb الإصدار المتأثر: 1.0.7.2 والإصدارات السابقة على الأرجح معرف...

6.1CVSS5.9AI score0.00379EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/31 12:22 p.m.2 views

Vvveb-CMS-CVE-2025-8518

Vvveb-CMS-CVE-2025-8518 यह रिपॉजिटरी givanz Vvveb 1.0.5 में एक गंभीर कमजोरी के प्रूफ ऑफ कॉन्सेप्ट PoC को प्रदर्शित करती है। यह कमजोरी एक प्रमाणित उपयोगकर्ता को टेम्पलेट संपादन विशेषाधिकारों के साथ सर्वर फ़ाइलों में मनमाना PHP कोड लिखने की अनुमति देती है, जिससे रिमोट कोड एक्सीक्यूशन RCE होता है।...

7.2CVSS5.8AI score0.01406EPSS
SaveExploits6
NVD
NVD
added 2026/08/18 5:16 p.m.10 views

CVE-2026-49228

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product operations allow a low-privileged Vendor to access products owned by another Vendor. The admin/controller/product/products.php controller accepts a...

8.8CVSS0.0038EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/18 5:16 p.m.8 views

CVE-2026-49225

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product revision operations allow a low-privileged Vendor to access revisions for products owned by another Vendor. The admin/controller/product/revisions.php...

8.3CVSS0.00424EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/18 5:16 p.m.5 views

CVE-2026-49224

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The admin/controller/content/revisions.php controll...

8.3CVSS0.00424EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/18 5:16 p.m.6 views

CVE-2026-49223

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product review operations allow a low-privileged Vendor to manage reviews under another Vendor's products. The admin/sql/sqlite/productreview.sql queries accept ...

7.6CVSS0.00298EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/18 5:16 p.m.7 views

CVE-2026-49222

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product question operations allow a low-privileged Vendor to manage questions under another Vendor's products. The admin/sql/sqlite/productquestion.sql queries...

7.6CVSS0.00298EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/18 4:18 p.m.23 views

CVE-2026-49223

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product review operations allow a low-privileged Vendor to manage reviews under another Vendor's products. The admin/sql/sqlite/productreview.sql queries accept ...

7.6CVSS5.4AI score0.00298EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/08/18 4:18 p.m.8 views

CVE-2026-49223 Vvveb product review authorization bypass allows Vendors to read, approve, edit, or delete reviews under other Vendors' products

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product review operations allow a low-privileged Vendor to manage reviews under another Vendor's products. The admin/sql/sqlite/productreview.sql queries accept ...

7.6CVSS5.5AI score
SaveExploits0References5
EUVD
EUVD
added 2026/08/18 4:18 p.m.9 views

EUVD-2026-61039

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product review operations allow a low-privileged Vendor to manage reviews under another Vendor's products. The admin/sql/sqlite/productreview.sql queries accept ...

7.6CVSS5.4AI score0.00298EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/18 4:18 p.m.25 views

CVE-2026-49223

Vvveb CMS (versions before 1.0.8.4) has an authorization bypass in admin/sql/sqlite/product_review.sql, which accepts a caller-controlled product_review_id without verifying ownership against the current admin's admin_id. A low-privileged Vendor can read, edit, approve, or delete reviews under an...

7.6CVSS5.4AI score0.00298EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/18 4:18 p.m.23 views

CVE-2026-49223 Vvveb product review authorization bypass allows Vendors to read, approve, edit, or delete reviews under other Vendors' products

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product review operations allow a low-privileged Vendor to manage reviews under another Vendor's products. The admin/sql/sqlite/productreview.sql queries accept ...

7.6CVSS0.00298EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/18 4:17 p.m.10 views

EUVD-2026-61038

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The admin/controller/content/revisions.php controll...

8.3CVSS5.3AI score0.00424EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/18 4:17 p.m.26 views

CVE-2026-49224

CVE-2026-49224 is an authorization bypass in Vvveb CMS (prior to 1.0.8.4) affecting post revision operations. The admin/controller/content/revisions.php controller and admin/sql/sqlite/post_content_revision.sql queries trust caller-controlled post_id, language_id, and created_at values without co...

8.3CVSS5.3AI score0.00424EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/18 4:17 p.m.21 views

CVE-2026-49224 Vvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisions

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The admin/controller/content/revisions.php controll...

8.3CVSS0.00424EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/18 4:17 p.m.21 views

CVE-2026-49224

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The admin/controller/content/revisions.php controll...

8.3CVSS5.3AI score0.00424EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/08/18 4:17 p.m.9 views

CVE-2026-49224 Vvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisions

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post revision operations allow a low-privileged Author to access revisions for posts owned by another Author. The admin/controller/content/revisions.php controll...

8.3CVSS5.5AI score
SaveExploits0References5
NVD
NVD
added 2026/08/18 4:17 p.m.6 views

CVE-2026-49226

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend post operations allow a low-privileged Author to access posts owned by another Author. The admin/controller/content/posts.php controller permits filteradminid to...

8.3CVSS0.00331EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/18 4:17 p.m.8 views

CVE-2026-49221

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend digital asset operations allow a low-privileged Vendor to access digital assets linked to another Vendor's products. The admin/controller/product/digital-asset.p...

8.8CVSS0.0038EPSS
SaveExploits0References3
Rows per page
Query Builder