This exploit allows an attacker to perform a remote BLIND SQL injection attack on Vivvo CMS version 3.4 and below. The exploit takes advantage of a vulnerability in the index.php file of the CMS. The attacker can write the target after submitting the click.