CVE-2006-4714

This is a writeup describing a file inclusion vulnerability in phpWordPress (Vivvo Article Manager) <=3.2. The vulnerability arises from the use of user-controlled input in an include statement when register_globals is enabled.

This Perl script exploits multiple vulnerabilities in Vivvo CMS, including RFI, SQL injection, and blind SQL injection, targeting specific versions (3.2, 3.4). It automates detection and exploitation by fetching version info and attempting attacks based on the identified version.