Lucene search
HistoryJun 21, 2006 - 7:02 p.m.
CVE-2006-2931
cms mundo
image verification
remote code execution
security vulnerability
cve-2006-2931
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.03 Low
EPSS
Percentile
90.9%
CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files.
Affected configurations
Node
hotwebscriptscms_mundoMatch1.0
ORhotwebscriptscms_mundoMatch1.0_build_007
Related
nvd
nvd
CVE-2006-2931
2006-06-21 19:02:00
cvelist
cvelist
CVE-2006-2931
2006-06-21 19:00:00
prion
prion
Code injection
2006-06-21 19:02:00
securityvulns
securityvulns
Secunia Research: CMS Mundo SQL Injection and File Upload Vulnerabilities
2006-06-15 00:00:00
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
High
0.03 Low
EPSS
Percentile
90.9%
Related for CVE-2006-2931