PT-2025-42723

CVE-2025-11944

Published

2025-10-19

Updated

2025-10-19

Description by

CVSS 3.1

7.2

High

MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions givanz Vvveb versions up to 1.0.7.3

Description A flaw exists in givanz Vvveb that allows for SQL injection. This issue is related to the Import function within the admin/controller/tools/import.php file of the Raw SQL Handler component. The attack can be initiated remotely. The exploit has been publicly disclosed.

Recommendations Apply patch 52204b4a106b2fb02d16eee06a88a1f2697f9b35 to resolve this issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\'Injection\')

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')

Related identifiers