CVE-2025-11944

    Dashboard / Vulnerabilities / CVE-2025-11944

    CVE-2025-11944

    Published: 19 Oct 2025Last Modified: 10 Oct 2026

    Summary: givanz Vvveb Raw SQL import.php import sql injection

    Details: A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 52204b4a106b2fb02d16eee06a88a1f2697f9b35. It is recommended to apply a patch to fix this issue.

    References: https://github.com/givanz/Vvveb/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/11xxx/CVE-2025-11944.json, https://nvd.nist.gov/vuln/detail/CVE-2025-11944, https://vuldb.com/?id.329024, https://vuldb.com/?submit.673129, https://github.com/givanz/Vvveb/issues/332, https://github.com/givanz/Vvveb/issues/332#issue-3505043543, https://vuldb.com/?ctiid.329024, https://github.com/givanz/Vvveb/commit/52204b4a106b2fb02d16eee06a88a1f2697f9b35

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -52204b4a106b2fb02d16eee06a88a1f2697f9b35

    Affected versions

    1.0.7.1
    1.0.7.2
    1.0.7.3
    1.0.7
    1.0.6
    1.0.5
    1.0.4
    1.0.3
    1.0.2
    1.0.1
    1.0.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2025-11944 | CVE-DB