Vvveb CMS vulnerabilities
2 known vulnerabilities in Vvveb CMS from Vvveb. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest first
- 9.1 Critical severity
Vvveb CMS: Unrestricted Upload of File with Dangerous Type
Vvveb CMS before 1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler allows authenticated attackers to rename files to blocked extensions .php or .htaccess. At
- 8.8 High severity
Vvveb CMS: Unrestricted Upload of File with Dangerous Type
Vvveb CMS 1.0.8.2 contains a remote code execution vulnerability in its media upload handler that allows authenticated attackers to execute arbitrary operating system commands by uploading a PHP webshell with a .phtml extension. Attackers can bypass the extens