Unrated severityNVD Advisory· Published Jun 21, 2006· Updated Apr 16, 2026

CVE-2006-2931

Description

CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files.

Affected products

Hotwebscripts/CMS Mundo2 versions
cpe:2.3:a:hotwebscripts:cms_mundo:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hotwebscripts:cms_mundo:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:hotwebscripts:cms_mundo:1.0_build_007:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/secunia_research/2006-43/advisory/nvdVendor Advisory
secunia.com/advisories/20362nvd
securitytracker.com/idnvd
www.osvdb.org/26465nvd
www.securityfocus.com/archive/1/437183/100/200/threadednvd
www.vupen.com/english/advisories/2006/2348nvd
exchange.xforce.ibmcloud.com/vulnerabilities/27094nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000