CVE-2007-3939 - SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress

CVE-2007-3939

Summary

SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter.

References

http://osvdb.org/39110
http://www.securityfocus.com/bid/24955
https://exchange.xforce.ibmcloud.com/vulnerabilities/35464
https://www.exploit-db.com/exploits/4192

Vulnerable Configurations

cpe:2.3:a:spoonlabs:vivvo_article_management_cms:*:*:*:*:*:*:*:*
cpe:2.3:a:spoonlabs:vivvo_article_management_cms:*:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 29-09-2017 - 01:29)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

bid	24955
exploit-db	4192
osvdb	39110
xf	vivvocms-index-sql-injection(35464)

Last major update

29-09-2017 - 01:29

Published

21-07-2007 - 00:30

Last modified

29-09-2017 - 01:29