CVE-2006-2931

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-21 · updated 2026-06-16

Description

CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files.

Affected products

Hotwebscripts Cms Mundo: 1.0, 1.0_build_007

References

http://secunia.com/advisories/20362
http://secunia.com/secunia_research/2006-43/advisory/
http://securitytracker.com/id?1016311
http://www.osvdb.org/26465
http://www.securityfocus.com/archive/1/437183/100/200/threaded
http://www.vupen.com/english/advisories/2006/2348
https://exchange.xforce.ibmcloud.com/vulnerabilities/27094
http://secunia.com/advisories/20362
http://secunia.com/secunia_research/2006-43/advisory/
http://securitytracker.com/id?1016311
http://www.osvdb.org/26465
http://www.securityfocus.com/archive/1/437183/100/200/threaded

Get alerted when CVE-2006-2931 or the next vulnerability affects your stack