Vulnerability Details : CVE-2006-2931
CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files.
Exploit prediction scoring system (EPSS) score for CVE-2006-2931
Probability of exploitation activity in the next 30 days: 2.41%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 89 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2006-2931
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
5.1
|
MEDIUM | AV:N/AC:H/Au:N/C:P/I:P/A:P |
4.9
|
6.4
|
[email protected] |
References for CVE-2006-2931
Products affected by CVE-2006-2931
- cpe:2.3:a:hotwebscripts:cms_mundo:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:hotwebscripts:cms_mundo:1.0_build_007:*:*:*:*:*:*:*