CVE-2006-3135

CVE-2006-3135 affects CMS Mundo 1.0 build 008 (and possibly other versions). The vulnerability is a set of multiple SQL injection flaws that enable remote attackers to run arbitrary SQL commands via (1) news_id in the news module, (2) searchstring in the search module, (3) id in the webshop modul...

CVE-2006-3135

Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the 1 newsid parameter in the a news module, 2 searchstring parameter in b the search module, 3 id parameter in c the webshop module, 4...