19 matches found
EUVD-2005-3839
Malware in sbrugna...
Vivvo Article Manager <= 3.2 (id) Remote SQL Injection Vulnerability
No description provided by source. MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in pdfversion.php : line 19: $aid=securesql$GET'id'; line 20: $query=SELECT from tblArticles where id=$aid; securesql functio...
PHPWordPress 3.0 - Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/15582/info PHPWordPress is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
CVE-2007-3939
CVE-2007-3939 affects SpoonLabs Vivvo Article Management CMS (aka phpWordPress) up to version 3.4. The vulnerability is an SQL injection in index.php where the attacker can influence the category parameter to execute arbitrary SQL commands on the backend. This aligns with remote-execution-like ri...
CVE-2007-0574
SQL injection vulnerability in rss/showwebfeed.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.40 allows remote attackers to execute arbitrary SQL commands via the wcHeadlines parameter, a different vector than CVE-2006-4715. NOTE: The provenance of this information is unknown; t...
CVE-2006-4714
PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classifiedpath parameter...
CVE-2006-4715
SQL injection vulnerability in pdfversion.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-4714
The CVE-2006-4714 entry describes a PHP remote file inclusion in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier. When register_globals is enabled, an attacker can cause arbitrary PHP code execution via a URL supplied to the classified_path parameter in index.php. Affect...
CVE-2006-4715
CVE-2006-4715 : A SQL injection vulnerability in pdf_version.php affects SpoonLabs Vivvo Article Management CMS (aka phpWordPress)
phpWordPress (Vivvo Article Manager)
MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in HTMLfunction.php function HTMLCategoryMenu : line 51: includeonce$classifiedpath.'exportcategory.php'; if registerglobals = On then this code can include...
phpWordPress (Vivvo Article Manager)
MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in pdfversion.php : line 19: $aid=securesql$GET'id'; line 20: $query="SELECT from tblArticles where id=$aid"; securesql function doesn't block all sql injection...
Vivvo Article Manager 3.2 - 'classified_path' File Inclusion
MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in HTMLfunction.php function HTMLCategoryMenu : line 51: includeonce$classifiedpath.'exportcategory.php'; if registerglobals = On then this code can include...
Vivvo Article Manager 3.2 - id SQL Injection
Vivvo Article Manager 3.2 - id SQL Injection MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in pdfversion.php : line 19: $aid=securesql$GET'id'; line 20: $query="SELECT from tblArticles where id=$aid";...
Vivvo Article Manager <= 3.2 (classified_path) File Include Vulnerability
No description provided by source. MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in HTMLfunction.php function HTMLCategoryMenu : line 51: includeonce$classifiedpath.'exportcategory.php'; if registerglobals ...
Vivvo Article Manager 3.2 - 'id' SQL Injection
MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in pdfversion.php : line 19: $aid=securesql$GET'id'; line 20: $query="SELECT from tblArticles where id=$aid"; securesql function doesn't block all sql injection...
Vivvo Article Manager <= 3.2 (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Vivvo Article Manager = 3.2 id Remote SQL Injection Vulnerability ==================================================================== MercilessTurk email protected App...
phpWordPress 3.0 - Multiple SQL Injections
phpWordPress 3.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/15582/info PHPWordPress is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successfu...
CVE-2005-3844
CVE-2005-3844 concerns a SQL injection vulnerability in the phpWordWordPress PHP News and Article Manager 3.0. The issue allows remote attackers to execute arbitrary SQL commands via parameters: (1) poll and (2) category in index.php, and (3) ctg in an archive action. Affected software is the PHP...
CVE-2005-3844
SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the 1 poll and 2 category parameters to index.php, and 3 the ctg parameter in an archive action...