Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the control of the server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CMSUno 命令注入漏洞
Vulnerability Description
CMSUno是法国Jacques Malgrange软件开发者的一款用于创建单页响应式网站的工具。 CMSuno 1.6.2版本存在安全漏洞，攻击者可利用该漏洞可以将恶意代码注入CMSuno 1.6.2 uno central.php文件中的“lang”参数中，并在网页中运行该PHP代码，接管服务器的控制权。
CVSS Information
N/A
Vulnerability Type
N/A