Lucene search
GoogleOSV:CVE-2021-40889HistoryOct 11, 2021 - 10:15 a.m.
CVE-2021-40889
2021-10-1110:15:07
Google
osv.dev
2
CMSUno version 1.7.2 is affected by a PHP code execution vulnerability. sauvePass action in {webroot}/uno/central.php file calls to file_put_contents() function to write username in password.php file when a user successfully changed their password. The attacker can inject malicious PHP code into password.php and then use the login function to execute code.
References
Related
cvelist
cvelist
CVE-2021-40889
2021-10-11 09:56:11
nvd
nvd
CVE-2021-40889
2021-10-11 10:15:07
cve
cve
CVE-2021-40889
2021-10-11 10:15:07
prion
prion
Remote code execution
2021-10-11 10:15:00
checkpoint_advisories
checkpoint_advisories
CMSUno Remote Code Execution (CVE-2021-40889)
2021-11-28 00:00:00