CVE-2006-3135

Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via…

published July 13, 2006

CVSS
—
EPSS
2%
Percentile
79.4
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the (1) news_id parameter in the (a) news module, (2) searchstring parameter in (b) the search module, (3) id parameter in (c) the webshop module, (4) username parameter in (d) index.php, and (5) Name, (6) Address, (7) Zip, (8) City, (9) Country, and (10) Email fields during (e) a user profile update.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01894 · 79.4th percentile
Published
2006-07-13T21:00Z
EPSS history
Timeline
  • 13 JUL 21:00Z
    Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via…
    cvelistv5