| Package | Affected versions | Patched versions |
|---|---|---|
| cmsuno | = 1.6.2 |
An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the control of the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free