Description
Vvveb through 1.0.8.6 contains an SQL injection vulnerability in Admin_Auth_TokenSQL::update(), which interpolates admin_auth_token array keys into an INSERT column list without a column whitelist or backtick escaping. Authenticated admin-panel users can submit backtick-containing keys to the admin/auth-token save action to inject comments and column identifiers into the SQL statement.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| givanz | Vvveb | ≤ 1.0.8.6 | — |
References
- GitHub Security Advisory (GHSA-ffrq-8926-cpc9) vendor-advisory
- VulnCheck Advisory: Vvveb through 1.0.8.6 SQL Injection via Admin_Auth_TokenSQL::update() Array Keys third-party-advisory