Snip0R

Name of the Vulnerable Software and Affected Versions: SpoonLabs Vivvo Article Management CMS version 3.4 Description: The issue allows remote attackers to include and execute arbitrary local files. This is achieved via the `root` parameter in the include/db conn.php file, enabling directory traversal. Recommendations: For SpoonLabs Vivvo Article Management CMS version 3.4, consider restricting access to the include/db conn.php file to minimize the risk of exploitation. Avoid using the `root` parameter in this file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.