CVE-2006-4715
SpoonLabs Vivvo Article Management CMS <3.2 - SQL Injection
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-4715. PoCs published by MercilessTurk.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Vivvo Article Manager's pdf_version.php, allowing an attacker to extract user credentials (username and password) via a crafted UNION-based SQL query.
Description
SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Vivvo Article Manager's pdf_version.php, allowing an attacker to extract user credentials (username and password) via a crafted UNION-based SQL query.
This Perl script exploits multiple vulnerabilities in Vivvo CMS, including RFI, SQL injection, and blind SQL injection. It targets outdated versions (3.2, 3.4) and attempts to fetch a remote shell (C99Shell) or extract user credentials.