CMS Mundo username SQL injection
| cmsmundo-username-sql-injection (27093) |  Medium Risk |
Description:
CMS Mundo is vulnerable to SQL injection. If magic_quotes_gpc is disabled, a remote attacker could send specially-crafted SQL statements to the controlpanel page using the 'username' parameter during the login process, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Consequences:
Data Manipulation
Remedy:
Upgrade to the latest version of CMS Mundo (1.0 build 008 or later), available from Hotwebscripts.com. See References.
References:
- HotWebScripts.com: CMS Mundo.
- BID-18451: CMS MUNDO Control Panel SQL Injection Vulnerability
- CVE-2006-2911: SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to execute arbitrary SQL commands via the username parameter.
- OSVDB ID: 26464: CMS Mundo controlpanel/ username Variable SQL Injection
- SA20362: CMS Mundo SQL Injection and File Upload Vulnerabilities
- SECTRACK ID: 1016311: CMS Mundo Input Validation Flaw Lets Remote Users Inject SQL Commands and Remote Authenticated Administrators Upload Arbitrary Code
- VUPEN/ADV-2006-2348: CMS Mundo Multiple Variable Handling SQL Injection and File Upload Vulnerabilities
Platforms Affected:
- HotWebScripts.com CMS Mundo 1.0 build 007
Reported:
Jun 14, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net