High severity8.8NVD Advisory· Published Nov 13, 2020· Updated Jun 17, 2026
CVE-2020-25538
CVE-2020-25538
Description
An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the control of the server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- CMSuno/CMSunodescription
- cpe:2.3:a:cmsuno_project:cmsuno:1.6.2:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/161162/CMSUno-1.6.2-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
- fatihhcelik.blogspot.com/2020/09/cmsuno-162-remote-code-execution_30.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.