vivvo vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in Vivvo CMS prior to 4.1.1 allows remote malicious users to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response.

Vivvo Vivvo Vivvo Vivvo 4.0.2 Vivvo Vivvo 4.0.1 Vivvo Vivvo 4.0.4 Vivvo Vivvo 4.0.3

Cross-site request forgery (CSRF) vulnerability in Vivvo CMS prior to 4.0.4 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.

Vivvo Vivvo 4.0.2 Vivvo Vivvo 4.0.1 Vivvo Vivvo

files.php in Vivvo CMS 4.1.5.1 allows remote malicious users to conduct directory traversal attacks and read arbitrary files via the file parameter with "logs/" in between two . (dot) characters, which is filtered into a "../" sequence.

Vivvo Vivvo 4.1.5.1

1 EDB exploit

SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and previous versions allows remote malicious users to execute arbitrary SQL commands via the id parameter.

Spoonlabs Vivvo Article Management Cms 3.2 Spoonlabs Vivvo Article Management Cms

2 EDB exploits

PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and previous versions, when register_globals is enabled, allows remote malicious users to execute arbitrary PHP code via a URL in the classified_path parameter.

Spoonlabs Vivvo Article Management Cms 3.2 Spoonlabs Vivvo Article Management Cms

2 EDB exploits

SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and previous versions allows remote malicious users to execute arbitrary SQL commands via the category parameter.

Spoonlabs Vivvo Article Management Cms

2 EDB exploits

Directory traversal vulnerability in include/db_conn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote malicious users to include and execute arbitrary local files via the root parameter.

Spoonlabs Vivvo Article Management Cms 3.4

1 EDB exploit

SQL injection vulnerability in rss/show_webfeed.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.40 allows remote malicious users to execute arbitrary SQL commands via the wcHeadlines parameter, a different vector than CVE-2006-4715. NOTE: The provenance of this...

Spoonlabs Vivvo Article Management Cms 3.40

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook