PT-2020-16107

Name of the Vulnerable Software and Affected Versions CMSuno version 1.6.2 Description An authenticated attacker can inject malicious code into the lang parameter in the "/uno/central.php" file and run this PHP code in the web page, potentially allowing the attacker to take control of the server...