TI-2021-17804 CVE-2021-40889 · GHSA-hcrw-87mg-3f84
CMSUno version 1.7.2 is affected by a PHP code execution vulnerability.
Priority MEDIUM 46
CMSUno version 1.7.2 is affected by a PHP code execution vulnerability.
Vulnerabilities
6 records
TI-2021-14829 CVE-2021-36654 · GHSA-hm39-4923-4crx
CMSuno 1.7 is vulnerable to an authenticated stored cross site scripting in modifying the…
Priority LOW 28
CMSuno 1.7 is vulnerable to an authenticated stored cross site scripting in modifying the filename parameter (tgo) while updating the theme.
TI-2020-15592 CVE-2020-25557 · GHSA-rf6m-wqqh-49rx
In CMSuno 1.6.2, an attacker can inject malicious PHP code as a "username" while changing…
Priority MEDIUM 50
In CMSuno 1.6.2, an attacker can inject malicious PHP code as a "username" while changing his/her username & password.
TI-2020-15590 CVE-2020-25538 · GHSA-5vc8-f4x6-cg96
An authenticated attacker can inject malicious code into "lang" parameter in…
Priority MEDIUM 50
An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page.
TI-2020-12275 CVE-2020-15600 · GHSA-5r7r-xr4q-75hm
An issue was discovered in CMSUno before 1.6.1.
Priority LOW 33
An issue was discovered in CMSUno before 1.6.1.
TI-2018-11102 CVE-2018-15567 · GHSA-87xc-6jc8-x7r3
CMSUno before 1.5.3 has XSS via the title field.
Priority LOW 28
CMSUno before 1.5.3 has XSS via the title field.