medium6.8Public exploit code
CVE-2007-3939
SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and earlier allows remote attackers to execute ar…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Vivvo CMS 3.4 - Multiple Vulnerabilities2008-10-19 · webapps · php · Verified
- Vivvo CMS 3.4 - 'index.php' Blind SQL Injection2007-07-18 · webapps · php · Verified
Impact
SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Spoonlabs | Vivvo Article Management Cms | through 3.40 |
References
- NVD record
- CVE.org record
- http://osvdb.org/39110
- http://www.securityfocus.com/bid/24955
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35464
- https://www.exploit-db.com/exploits/4192
- http://osvdb.org/39110
- http://www.securityfocus.com/bid/24955
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35464
- https://www.exploit-db.com/exploits/4192