CVE-2007-3939 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 2.1% (pctl 81)
Patch early
A public exploit exists.
Description
SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 2.07% — more likely to be exploited than 81% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-07-21 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| spoonlabs | vivvo article management cms |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Vivvo CMS 3.4 - Multiple Vulnerabilities | 2008-10-19 |
| exploit-db | Vivvo CMS 3.4 - 'index.php' Blind SQL Injection | 2007-07-18 |
References
- http://osvdb.org/39110
- http://www.securityfocus.com/bid/24955
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35464
- https://www.exploit-db.com/exploits/4192
- http://osvdb.org/39110
- http://www.securityfocus.com/bid/24955
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35464
- https://www.exploit-db.com/exploits/4192
→ the Explorer · watch your stack · NVD