CVE-2025-11944

Medium

Description

A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 52204b4a106b2fb02d16eee06a88a1f2697f9b35. It is recommended to apply a patch to fix this issue.

SeverityMedium

CVSS4.7

Exploit probability—

ProductVvveb

PublishedOct 19, 2025

First seenOct 19, 2025

Weakness typeCWE-89SQL injection CWE-74Injection

How to fix

Patches

github.com/givanz/Vvveb/commit/52204b4a106b2fb02d16eee06a88a1f2697f9b35

Affected products

Product	Affected versions	Fixed in
vvveb vvveb	v ≤ 1.0.7.3	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.