CVE-2006-4714: Spoonlabs Vivvo Article Management CMS

Medium severity, CVSS 5.1. EPSS: 3.5% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classified_path parameter.

Affected products

• Spoonlabs Vivvo Article Management CMS: up to and including 3.25; version 3.2 only

Published 2006-09-12. Last modified 2026-06-16.