https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-14T11:54:22.523022+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-126371 CVE-2026-126371 — Vvveb through 1.0.8.6 SQL Injection via Admin_Auth_TokenSQL::update() Array Keys 2026-11-14T11:54:22.524249+00:00

Affected: givanz Vvveb

Vvveb through 1.0.8.6 contains an SQL injection vulnerability in Admin_Auth_TokenSQL::update(), which interpolates admin_auth_token array keys into an INSERT column list without a column whitelist or backtick escaping. Authenticated admin-panel users can submit backtick-containing keys to the admin/auth-token save action to inject comments and column identifiers into the SQL statement.