CVEvulnerability

CVE-2006-2931

5.1 MEDIUM Published 2006-06-21 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2006-06-21
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P

Description

CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files.

Affected configurations

• hotwebscripts cms mundo 1.0 • hotwebscripts cms mundo 1.0 build 007

References

http://secunia.com/advisories/20362 secunia.com
http://secunia.com/secunia_research/2006-43/advisory/ Vendor Advisory
http://securitytracker.com/id?1016311 securitytracker.com
http://www.osvdb.org/26465 www.osvdb.org
http://www.securityfocus.com/archive/1/437183/100/200/threaded www.securityfocus.com
http://www.vupen.com/english/advisories/2006/2348 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27094 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/20362 secunia.com
http://secunia.com/secunia_research/2006-43/advisory/ Vendor Advisory
http://securitytracker.com/id?1016311 securitytracker.com
http://www.osvdb.org/26465 www.osvdb.org
http://www.securityfocus.com/archive/1/437183/100/200/threaded www.securityfocus.com
http://www.vupen.com/english/advisories/2006/2348 www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/27094 exchange.xforce.ibmcloud.com