Description
SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to execute arbitrary SQL commands via the username parameter.
References
- 18451 vdb-entry
- http://secunia.com/secunia_research/2006-43/advisory/
- ADV-2006-2348 vdb-entry
- 20060614 Secunia Research: CMS Mundo SQL Injection and File UploadVulnerabilities mailing-list
- 26464 vdb-entry
- cmsmundo-username-sql-injection(27093) vdb-entry
- 20362 third-party-advisory
- 1016311 vdb-entry