PT-2006-3845 · Cms Mundo · Cms Mundo

Publicado 2006-06-21 · Atualizado 2018-10-18 · CVE-2006-2931

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CMS Mundo versions prior to 1.0 build 008

Description The issue arises from improper verification of uploaded image files, allowing remote attackers to execute arbitrary PHP code. This can be achieved by uploading and later directly accessing certain files.

Recommendations For CMS Mundo versions prior to 1.0 build 008, update to version 1.0 build 008 or later to resolve the issue. As a temporary workaround, consider restricting access to image upload functionality until a patch is available.

Correção

Identificadores relacionados

CVE-2006-2931

Produtos afetados

Cms Mundo

Referências · 8

• http://securityfocus.com/archive/1/437183/100/200/threaded · Nota
• http://secunia.com/secunia_research/2006-43/advisory · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/2348 · Nota
• http://secunia.com/advisories/20362 · Nota
• http://securitytracker.com/id?1016311 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27094 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2931 · Nota de Segurança
• http://osvdb.org/26465 · Nota