Vulnerabilities > CVE-2006-4715 - SQL Injection vulnerability in Spoonlabs Vivvo Article Management CMS 3.2

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
spoonlabs
exploit available
NVD
Published: 2006-09-12
Updated: 2017-10-19

Summary

SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. This vulnerability is addressed in a patch for version 3.25 of this product.

Vulnerable Configurations

Part Description Count
Application
Spoonlabs
2

Exploit-Db

  • descriptionVivvo CMS <= 3.4 Multiple Vulnerabilities Destroyer Exploit. CVE-2006-4714,CVE-2006-4715,CVE-2007-3939. Webapps exploit for php platform
    idEDB-ID:6789
    last seen2016-02-01
    modified2008-10-19
    published2008-10-19
    reporterXianur0
    sourcehttps://www.exploit-db.com/download/6789/
    titleVivvo CMS <= 3.4 - Multiple Vulnerabilities Destroyer Exploit
  • descriptionVivvo Article Manager <= 3.2 (id) Remote SQL Injection Vulnerability. CVE-2006-4715. Webapps exploit for php platform
    fileexploits/php/webapps/2337.txt
    idEDB-ID:2337
    last seen2016-01-31
    modified2006-09-09
    platformphp
    port
    published2006-09-09
    reporterMercilessTurk
    sourcehttps://www.exploit-db.com/download/2337/
    titleVivvo Article Manager <= 3.2 id Remote SQL Injection Vulnerability
    typewebapps

References