Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In CMSuno 1.6.2, an attacker can inject malicious PHP code as a "username" while changing his/her username & password. After that, when attacker logs in to the application, attacker's code will be run. As a result of this vulnerability, authenticated user can run command on the server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CMSUno 命令注入漏洞
Vulnerability Description
CMSUno是法国Jacques Malgrange软件开发者的一款用于创建单页响应式网站的工具。 CMSuno 1.6.2版本存在安全漏洞，攻击者可利用该漏洞可以将恶意PHP代码作为“用户名”注入，同时更改其用户名和密码。攻击者可利用该漏洞登录到应用程序运行代码。
CVSS Information
N/A
Vulnerability Type
N/A