Vulnerabilities > CVE-2007-0574 - SQL Injection vulnerability in Spoonlabs Vivvo Article Management CMS 3.40

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
spoonlabs
exploit available
NVD
Published: 2007-01-30
Updated: 2008-11-13

Summary

SQL injection vulnerability in rss/show_webfeed.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.40 allows remote attackers to execute arbitrary SQL commands via the wcHeadlines parameter, a different vector than CVE-2006-4715. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Vulnerable Configurations

Part Description Count
Application
Spoonlabs
1

Exploit-Db

descriptionSpoonLabs Vivvo Article Management CMS 3.40 Show_Webfeed.PHP SQL Injection Vulnerability. CVE-2007-0574. Webapps exploit for php platform
idEDB-ID:29534
last seen2016-02-03
modified2007-01-27
published2007-01-27
reporterSt[at]rExT
sourcehttps://www.exploit-db.com/download/29534/
titleSpoonLabs Vivvo Article Management CMS 3.40 Show_Webfeed.PHP SQL Injection Vulnerability

References