CVE-2025-11944

A vulnerability was determined in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 52204b4a106b2fb02d16eee06a88a1f2697f9b35. It is recommended to apply a patch to fix this issue.

• CWE-74
• CWE-89
• CWE-89

• https://github.com/givanz/Vvveb/
• https://github.com/givanz/Vvveb/commit/52204b4a106b2fb02d16eee06a88a1f2697f9b35Patch
• https://github.com/givanz/Vvveb/issues/332Exploit, Issue Tracking
• https://github.com/givanz/Vvveb/issues/332#issue-3505043543Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.329024Permissions Required, VDB Entry
• https://vuldb.com/?id.329024Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.673129Third Party Advisory, VDB Entry

Published

Oct 19, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11939A vulnerability was determined in ChurchCRM up to 5.18.0. Th…7.2
• CVE-2025-1194A Regular Expression Denial of Service (ReDoS) vulnerability…6.5
• CVE-2025-11940A security vulnerability has been detected in LibreWolf up t…7.3
• CVE-2025-11941A vulnerability was detected in e107 CMS up to 2.3.3. This i…8.1
• CVE-2025-11942A flaw has been found in 70mai X200 up to 20251010. Affected…9.8
• CVE-2025-11943A vulnerability has been found in 70mai X200 up to 20251010.…9.8
• CVE-2025-11945A vulnerability was identified in toeverything AFFiNE up to …3.5
• CVE-2025-11946A security flaw has been discovered in LogicalDOC Community …5.4
• CVE-2025-11947A weakness has been identified in bftpd up to 6.2. Impacted …4.5
• CVE-2025-11948Document Management System developed by Excellent Infotek ha…9.8
• CVE-2025-11949EasyFlow .NET and EasyFlow AiNet, developed by Digiwin, has …8.7
• CVE-2025-1195A vulnerability, which was classified as problematic, has be…5.4