Approved changes feed: RSS · Atom
cpe:2.3:a:vvveb:vvveb_cms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Vvveb (566ec578-41e8-54d4-b6ba-4b9c621ac72f) |
|---|---|
| Product | Vvveb Cms (adf8da95-500f-5029-8826-110c4c38631e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6257 |
vulnerable | 2026-06-08 08:07:04.592683 |
Vvveb CMS < v1.0.8.2 Remote Code Execution via Media Management
CRITICAL (9.1)
Vvveb CMS v1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler allows authenticated attackers to rename files to blocked extensions .php or .htaccess. Attackers can exploit this logic flaw by first uploading a text file and renaming it to .htaccess to inject Apache directives that register PHP-executable MIME types, then uploading another file and renaming it to .php to execute arbitrary operating system commands as the www-data user.
Published: 2026-04-20T19:09:45.927Z
Updated: 2026-07-14T22:03:48.955Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6249 |
vulnerable | 2026-06-08 08:07:04.586463 |
Vvveb CMS 1.0.8.2 Remote Code Execution via Media Upload
HIGH (8.8)
Vvveb CMS 1.0.8.2 contains a remote code execution vulnerability in its media upload handler that allows authenticated attackers to execute arbitrary operating system commands by uploading a PHP webshell with a .phtml extension. Attackers can bypass the extension deny-list and upload malicious files to the publicly accessible media directory, then request the file over HTTP to achieve full server compromise.
Published: 2026-04-20T19:57:37.655Z
Updated: 2026-07-14T22:03:48.305Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.