Unrated severityNVD Advisory· Published Jun 21, 2006· Updated Jun 16, 2026

CVE-2006-2931

Description

CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files.

Affected products

Hotwebscripts/CMS Mundo2 versions
cpe:2.3:a:hotwebscripts:cms_mundo:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hotwebscripts:cms_mundo:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:hotwebscripts:cms_mundo:1.0_build_007:*:*:*:*:*:*:*
CMS Mundo/CMS Mundollm-create
Range: < 1.0 build 008

Patches

Vulnerability mechanics

References

secunia.com/secunia_research/2006-43/advisory/nvdVendor Advisory
secunia.com/advisories/20362nvd
securitytracker.com/idnvd
www.osvdb.org/26465nvd
www.securityfocus.com/archive/1/437183/100/200/threadednvd
www.vupen.com/english/advisories/2006/2348nvd
exchange.xforce.ibmcloud.com/vulnerabilities/27094nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000