4 matches found
CVE-2023-54349
AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search functionality. Attackers can enter script tags in the search box to execute arbitrary JavaScript that fires when...
Sql injection
SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter...
Directory traversal
Directory traversal vulnerability in include/dbconn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote attackers to include and execute arbitrary local files via the root parameter...
CVE-2007-1031
Directory traversal vulnerability in include/dbconn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote attackers to include and execute arbitrary local files via the root parameter...