CVE-2007-3939
CVE-2007-3939 is a medium-severity vulnerability in Spoonlabs Vivvo Article Management Cms with a CVSS 2.0 base score of 6.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 6.8)
- EPSS exploit prediction: 2% (79th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Spoonlabs Vivvo Article Management Cms
- Published:
- Last modified:
Description
SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter.
Frequently asked questions
- What is CVE-2007-3939?
- SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter.
- How severe is CVE-2007-3939?
- CVE-2007-3939 has a CVSS 2.0 base score of 6.8, rated medium severity.
- Is CVE-2007-3939 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (79th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2007-3939?
- CVE-2007-3939 affects Spoonlabs Vivvo Article Management Cms. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2007-3939?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2007-3939 published?
- CVE-2007-3939 was published on 2007-07-21 and last updated on 2026-06-16.
References
- http://osvdb.org/39110
- http://www.securityfocus.com/bid/24955
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35464
- https://www.exploit-db.com/exploits/4192
Affected products (1)
- cpe:2.3:a:spoonlabs:vivvo_article_management_cms:*:*:*:*:*:*:*:*
More vulnerabilities in Spoonlabs Vivvo Article Management Cms
- CVE-2007-0574 — High (CVSS 7.5): SQL injection vulnerability in rss/show_webfeed.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.40…
- CVE-2006-4715 — High (CVSS 7.5): SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and…
- CVE-2007-1031 — Medium (CVSS 6.8): Directory traversal vulnerability in include/db_conn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote…
- CVE-2006-4714 — Medium (CVSS 5.1): PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2…