TI-2024-18282 CVE-2024-27480 · GHSA-2rqx-6v8j-7xmq
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.
Priority HIGH 82
givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload.
Vulnerabilities
7 records
TI-2024-16623 CVE-2024-25183 · GHSA-cj98-23mv-wprf
givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.
Priority MEDIUM 40
givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php.
TI-2024-16622 CVE-2024-25182 · GHSA-wgr2-qr2w-94qw
givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.
Priority HIGH 82
givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php.
TI-2024-16621 CVE-2024-25181 · GHSA-5r6q-cg35-jr9q
A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both…
Priority HIGH 80
A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Forgery (SSRF) and arbitrary file reading.
TI-2025-07802 CVE-2025-8522 · GHSA-mxvv-74fw-8q2r
givanz Vvvebjs node.js save.php path traversal
Priority MEDIUM 45
A vulnerability, which was classified as critical, was found in givanz Vvvebjs up to 2.0.4.
TI-2024-19414 CVE-2024-29272 · GHSA-pmm3-68q9-57jg
Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows…
Priority MEDIUM 64
Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php.
TI-2024-19413 CVE-2024-29271 · GHSA-pc95-3wgm-x28p
Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7…
Priority LOW 30
Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php.