Skip to content
Noroxi

cmsuno project records

6 published records for vendor cmsuno project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 20
  3. 21

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2021-40889
    40Plan

    CMSUno version 1.7.2 is affected by a PHP code execution vulnerability.

    CriticalCVSS 9.8No exploitEPSS 1%

    cmsuno project · cmsunoOct 11, 2021

  • CVE-2020-25538
    38Monitor

    An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in

    HighCVSS 8.8Proof of conceptEPSS 9%

    cmsuno project · cmsunoNov 13, 2020

  • CVE-2020-25557
    38Monitor

    In CMSuno 1.6.2, an attacker can inject malicious PHP code as a "username" while changing his/her username & password.

    HighCVSS 8.8Proof of conceptEPSS 9%

    cmsuno project · cmsunoNov 13, 2020

  • CVE-2020-15600
    27Monitor

    An issue was discovered in CMSUno before 1.6.1.

    MediumCVSS 6.5Proof of conceptEPSS 1%

    cmsuno project · cmsunoJul 7, 2020

  • CVE-2018-15567
    24Monitor

    CMSUno before 1.5.3 has XSS via the title field.

    MediumCVSS 6.1No exploitEPSS 0%

    cmsuno project · cmsunoAug 19, 2018

  • CVE-2021-36654
    22Monitor

    CMSuno 1.7 is vulnerable to an authenticated stored cross site scripting in modifying the filename parameter (tgo) while updating the theme.

    MediumCVSS 5.4Proof of conceptEPSS 1%

    cmsuno project · cmsunoAug 3, 2021