Exploitation Summary
EIP tracks 2 public exploits for CVE-2006-4714. PoCs published by MercilessTurk.
AI-analyzed exploit summary This is a writeup describing a file inclusion vulnerability in phpWordPress (Vivvo Article Manager) <=3.2. The vulnerability arises from the use of user-controlled input in an include statement when register_globals is enabled.
Description
PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classified_path parameter.
Exploits (2)
This is a writeup describing a file inclusion vulnerability in phpWordPress (Vivvo Article Manager) <=3.2. The vulnerability arises from the use of user-controlled input in an include statement when register_globals is enabled.
This Perl script exploits multiple vulnerabilities in Vivvo CMS, including RFI, SQL injection, and blind SQL injection, targeting specific versions (3.2, 3.4). It automates detection and exploitation by fetching version info and attempting attacks based on the identified version.