Spoonlabs · Spoonlabs Vivvo Article Management Cms · CVE-2007-1031
Name of the Vulnerable Software and Affected Versions:
SpoonLabs Vivvo Article Management CMS version 3.4
Description:
The issue allows remote attackers to include and execute arbitrary local files. This is achieved via the `root` parameter in the include/db conn.php file, enabling directory traversal.
Recommendations:
For SpoonLabs Vivvo Article Management CMS version 3.4, consider restricting access to the include/db conn.php file to minimize the risk of exploitation. Avoid using the `root` parameter in this file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.