Skip to content
OpenAdvisories

Product · Vvveb

Vvveb CMS

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Vvveb CMS 1.0.8.2 Remote Code Execution via Media Upload

    Vvveb CMS 1.0.8.2 contains a remote code execution vulnerability in its media upload handler that allows authenticated attackers to execute arbitrary operating system commands by uploading a PHP webshell with a .phtml extension. Attackers can bypass the exten…