CVE-2006-3135

CVE-2006-3135 affects CMS Mundo 1.0 build 008 (and possibly other versions). The vulnerability is a set of multiple SQL injection flaws that enable remote attackers to run arbitrary SQL commands via (1) news_id in the news module, (2) searchstring in the search module, (3) id in the webshop modul...

CVE-2006-2911

The CVE concerns CMS Mundo prior to 1.0 build 008, where SQL injection in controlpanel/index.php via the login username parameter allows remote attackers to execute arbitrary SQL commands. This vulnerability affects the username handling in the login flow, enabling potential data disclosure/manip...