EUVD-2007-0572

Malware in sbrugna...

EUVD-2007-3923

Malware in sbrugna...

CVE-2007-3939

SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter...

Sql injection

SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2007-3939

SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2007-3939

CVE-2007-3939 affects SpoonLabs Vivvo Article Management CMS (aka phpWordPress) up to version 3.4. The vulnerability is an SQL injection in index.php where the attacker can influence the category parameter to execute arbitrary SQL commands on the backend. This aligns with remote-execution-like ri...

Directory traversal

Directory traversal vulnerability in include/dbconn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote attackers to include and execute arbitrary local files via the root parameter...

CVE-2007-1031

Directory traversal vulnerability in include/dbconn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote attackers to include and execute arbitrary local files via the root parameter...

CVE-2007-1031

CVE-2007-1031 covers a directory traversal in SpoonLabs Vivvo Article Management CMS 3.4. The vulnerability is in include/db_conn.php and allows remote attackers to include and execute arbitrary local files via the root parameter. Affected software: SpoonLabs Vivvo Article Management CMS 3.4 (com...

SpoonLabs Vivvo Article Management CMS Show_Webfeed.PHP SQL注入漏洞

SpoonLabs Vivvo Article Management CMS是一款基于PHP的WEB应用程序。 SpoonLabs Vivvo Article Management CMS不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'ShowWebfeed.PHP'脚本对用户提交的'wcHeadlines'参数缺少过滤，提交恶意SQL脚本代码作为参数数据，可更改原来的SQL逻辑，导致获得敏感信息。 SpoonLabs Vivvo Article Management CMS 3.40 目前没有解决方案提供,请关注以下链接：...

Sql injection

SQL injection vulnerability in rss/showwebfeed.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.40 allows remote attackers to execute arbitrary SQL commands via the wcHeadlines parameter, a different vector than CVE-2006-4715. NOTE: The provenance of this information is unknown; t...

CVE-2007-0574

SQL injection vulnerability in rss/showwebfeed.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.40 allows remote attackers to execute arbitrary SQL commands via the wcHeadlines parameter, a different vector than CVE-2006-4715. NOTE: The provenance of this information is unknown; t...

CVE-2006-4715

SQL injection vulnerability in pdfversion.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4714

PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classifiedpath parameter...

EUVD-2006-4701

PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classifiedpath parameter...

CVE-2006-4714

The CVE-2006-4714 entry describes a PHP remote file inclusion in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier. When register_globals is enabled, an attacker can cause arbitrary PHP code execution via a URL supplied to the classified_path parameter in index.php. Affect...

CVE-2006-4714

PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classifiedpath parameter...

CVE-2006-4715

CVE-2006-4715 : A SQL injection vulnerability in pdf_version.php affects SpoonLabs Vivvo Article Management CMS (aka phpWordPress)