https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-14T11:35:00.850445+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-fvmp-p95c-r4jx GHSA-fvmp-p95c-r4jx 2026-11-14T11:35:00.851800+00:00

Vvveb through 1.0.8.6 contains an SQL injection vulnerability in Admin_Auth_TokenSQL::update(), which interpolates admin_auth_token array keys into an INSERT column list without a column whitelist or backtick escaping. Authenticated admin-panel users can submit backtick-containing keys to the admin/auth-token save action to inject comments and column identifiers into the SQL statement.