Vulnerabilities > CVE-2007-3939 - SQL Injection vulnerability in SpoonLabs Vivvo CMS

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
spoonlabs
exploit available
NVD
Published: 2007-07-21
Updated: 2017-09-29

Summary

SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter.

Vulnerable Configurations

Part Description Count
Application
Spoonlabs
1

Exploit-Db

  • descriptionVivvo CMS <= 3.4 Multiple Vulnerabilities Destroyer Exploit. CVE-2006-4714,CVE-2006-4715,CVE-2007-3939. Webapps exploit for php platform
    idEDB-ID:6789
    last seen2016-02-01
    modified2008-10-19
    published2008-10-19
    reporterXianur0
    sourcehttps://www.exploit-db.com/download/6789/
    titleVivvo CMS <= 3.4 - Multiple Vulnerabilities Destroyer Exploit
  • descriptionVivvo CMS <= 3.4 (index.php) Remote BLIND SQL Injection Exploit. CVE-2007-3939. Webapps exploit for php platform
    fileexploits/php/webapps/4192.html
    idEDB-ID:4192
    last seen2016-01-31
    modified2007-07-18
    platformphp
    port
    published2007-07-18
    reporterajann
    sourcehttps://www.exploit-db.com/download/4192/
    titleVivvo CMS <= 3.4 index.php Remote BLIND SQL Injection Exploit
    typewebapps

References