EUVD-2007-0572

Malware in sbrugna...

Sql injection

SQL injection vulnerability in rss/showwebfeed.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.40 allows remote attackers to execute arbitrary SQL commands via the wcHeadlines parameter, a different vector than CVE-2006-4715. NOTE: The provenance of this information is unknown; t...

CVE-2007-0574

CVE-2007-0574 is an SQL injection vulnerability in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.40, exploitable via the wcHeadlines parameter in rss/show_webfeed.php. The issue allows remote attackers to execute arbitrary SQL commands, a different vector from CVE-2006-4715. Connect...