CVE:CVE-2006-2911
CNNVD:CNNVD-200606-397
CMS Mundo  1.0 build 008之前版本中的controlpanel/index.php存在SQL注入漏洞，远程攻击者可通过username参数来执行任意SQL命令。
solution:Upgrade hotwebscripts cms_mundo to a higher version than 1.0,1.0_build_007,and avoid the version 1.0,1.0_build_007