CVE-2025-11944 | givanz Vvveb up to 1.0.7.3 Raw SQL import.php import sql injection (Issue 332)

A vulnerability identified as critical has been detected in givanz Vvveb up to 1.0.7.3. This affects the function Import of the file admin/controller/tools/import.php of the component Raw SQL Handler. This manipulation causes sql injection.

This vulnerability appears as CVE-2025-11944. The attack may be initiated remotely. In addition, an exploit is available.

It is recommended to apply a patch to fix this issue.