CVE-2020-25538

An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the control of the server...

PT-2020-16107

Name of the Vulnerable Software and Affected Versions CMSuno version 1.6.2 Description An authenticated attacker can inject malicious code into the lang parameter in the "/uno/central.php" file and run this PHP code in the web page, potentially allowing the attacker to take control of the server...