CMS Mundo PHP file upload
| cmsmundo-php-file-upload (27094) |  Medium Risk |
Description:
CMS Mundo could allow a remote attacker to upload arbitrary PHP files to the Web root, caused by a vulnerability in the image upload functionality. If an attacker has access to the administrative section, the attacker could upload malicious PHP files to the system, which could result in arbitrary code execution.
Consequences:
Gain Access
Remedy:
Upgrade to the latest version of CMS Mundo (1.0 build 008 or later), available from Hotwebscripts.com. See References.
References:
- HotWebScripts.com: CMS Mundo.
- CVE-2006-2931: CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files.
- OSVDB ID: 26465: CMS Mundo Image Upload Handling Arbitrary PHP Code Execution
- SA20362: CMS Mundo SQL Injection and File Upload Vulnerabilities
- SECTRACK ID: 1016311: CMS Mundo Input Validation Flaw Lets Remote Users Inject SQL Commands and Remote Authenticated Administrators Upload Arbitrary Code
- VUPEN/ADV-2006-2348: CMS Mundo Multiple Variable Handling SQL Injection and File Upload Vulnerabilities
Platforms Affected:
- HotWebScripts.com CMS Mundo 1.0 build 007
Reported:
Jun 14, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net