← Back to CVE List

CVE-2020-25538

Published: 2020-11-13T16:15Z
Last Modified: 2024-11-21T05:18Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the control of the server. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt