PT-2006-3845 · Cms Mundo · Cms Mundo

Published 2006-06-21 · Updated 2018-10-18 · CVE-2006-2931

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CMS Mundo versions prior to 1.0 build 008

Description The issue arises from improper verification of uploaded image files, allowing remote attackers to execute arbitrary PHP code. This can be achieved by uploading and later directly accessing certain files.

Recommendations For CMS Mundo versions prior to 1.0 build 008, update to version 1.0 build 008 or later to resolve the issue. As a temporary workaround, consider restricting access to image upload functionality until a patch is available.

Fix

Related Identifiers

CVE-2006-2931

Affected Products

Cms Mundo

References · 8

• http://secunia.com/secunia_research/2006-43/advisory · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2931 · Security Note
• http://securityfocus.com/archive/1/437183/100/200/threaded · Note
• http://vupen.com/english/advisories/2006/2348 · Note
• http://secunia.com/advisories/20362 · Note
• http://securitytracker.com/id?1016311 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27094 · Note
• http://osvdb.org/26465 · Note