Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2006-3135

Disclosure Date: July 13, 2006 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the (1) news_id parameter in the (a) news module, (2) searchstring parameter in (b) the search module, (3) id parameter in (c) the webshop module, (4) username parameter in (d) index.php, and (5) Name, (6) Address, (7) Zip, (8) City, (9) Country, and (10) Email fields during (e) a user profile update.
0
0
Attacker Value
Unknown

CVE-2006-2931

Disclosure Date: June 21, 2006 (last updated October 04, 2023)
CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files.
0
0
Attacker Value
Unknown

CVE-2006-2911

Disclosure Date: June 21, 2006 (last updated October 04, 2023)
SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to execute arbitrary SQL commands via the username parameter.
0
0
Attacker Value
Unknown

CVE-2006-2684

Disclosure Date: May 31, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the search module in CMS Mundo 1.0 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter.
0
0