MercilessTurk

2 exploits Active since Sep 2006

CVE-2006-4714 EXPLOITDB text WRITEUP

SpoonLabs Vivvo Article Management CMS <3.2 - RCE

PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classified_path parameter.

View Code

CVE-2006-4715 EXPLOITDB text WORKING POC

SpoonLabs Vivvo Article Management CMS <3.2 - SQL Injection

SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

View Code