Information Disclosure in Givanz Vvveb Drag-and-Drop Editor
CVE-2025-8519

5.1MEDIUM

Key Information:

Vendor

Givanz

Status
Vvveb
Vendor
CVE Published:
4 August 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-8519?

A vulnerability has been discovered in Givanz's Vvveb Drag-and-Drop Editor, specifically in versions up to 1.0.5. The issue arises from improper handling of URL parameters in the file located at /vadmin123/index.php?module=editor/editor. This weakness could allow an attacker to remotely exploit the vulnerability, leading to potential information disclosure. Users are strongly encouraged to upgrade to version 1.0.6, which contains a fix for this vulnerability. Continuous monitoring of the affected systems is also recommended to mitigate any risks.

Affected Version(s)

Vvveb 1.0.0

Vvveb 1.0.1

Vvveb 1.0.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-8519 - Proof of Concept

References

https://vuldb.com/?id.318645
vdb-entrytechnical-description
https://vuldb.com/?ctiid.318645
signaturepermissions-required
https://vuldb.com/?submit.624972
third-party-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

0xHamy (VulDB User)
JSON
.