CVE-2006-2931

CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files.

CVSS v2.0 5.1 MEDIUM

5.1^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability : 4.9 / Impact : 6.4

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/secunia_research/2006-43/advisory/	Vendor Advisory
http://securitytracker.com/id?1016311
http://secunia.com/advisories/20362
http://www.osvdb.org/26465
http://www.vupen.com/english/advisories/2006/2348
https://exchange.xforce.ibmcloud.com/vulnerabilities/27094
http://www.securityfocus.com/archive/1/437183/100/200/threaded

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:hotwebscripts:cms_mundo:1.0_build_007:::::::*
	cpe:2.3:a:hotwebscripts:cms_mundo:1.0:::::::*

Information

Published : 2006-06-21 19:02

Updated : 2018-10-18 16:43

NVD link : CVE-2006-2931

Mitre link : CVE-2006-2931

JSON object : View

Products Affected

hotwebscripts

cms_mundo

CWE

NVD-CWE-Other

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://secunia.com/secunia_research/2006-43/advisory/", "name": "http://secunia.com/secunia_research/2006-43/advisory/", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "http://securitytracker.com/id?1016311", "name": "1016311", "tags": [], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/20362", "name": "20362", "tags": [], "refsource": "SECUNIA"}, {"url": "http://www.osvdb.org/26465", "name": "26465", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.vupen.com/english/advisories/2006/2348", "name": "ADV-2006-2348", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27094", "name": "cmsmundo-php-file-upload(27094)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/437183/100/200/threaded", "name": "20060614 Secunia Research: CMS Mundo SQL Injection and File UploadVulnerabilities", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-2931", "ASSIGNER": "PSIRT-CNA@flexerasoftware.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2006-06-21T19:02Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:hotwebscripts:cms_mundo:1.0_build_007:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hotwebscripts:cms_mundo:1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-18T16:43Z"}