Spoonlabs

spoonlabs

5 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Vivvo Article Management Cms

vivvo_article_management_cms

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-3939 1Spoonlabs 1Vivvo Article Management Cms Apr 23, 2026 Jul 21, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter.
CVE-2007-1031 1Spoonlabs 1Vivvo Article Management Cms Apr 23, 2026 Feb 21, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Directory traversal vulnerability in include/db_conn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote attackers to include and execute arbitrary local files via the root parameter.
CVE-2007-0574 1Spoonlabs 1Vivvo Article Management Cms Apr 23, 2026 Jan 30, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in rss/show_webfeed.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.40 allows remote attackers to execute arbitrary SQL commands via the wcHeadlines parameter, a different v...Show more SQL injection vulnerability in rss/show_webfeed.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.40 allows remote attackers to execute arbitrary SQL commands via the wcHeadlines parameter, a different vector than CVE-2006-4715. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.Show less
CVE-2006-4715 1Spoonlabs 1Vivvo Article Management Cms Apr 16, 2026 Sep 12, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2006-4714 1Spoonlabs 1Vivvo Article Management Cms Apr 16, 2026 Sep 12, 2006 N/A· v4 N/A· v3 5.1 MEDIUM· v2 PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code v...Show more PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classified_path parameter.Show less