PT-2020-16109 · Cmsuno · Cmsuno

Published 2020-11-13 · Updated 2025-01-11 · CVE-2020-25557

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CMSuno version 1.6.2

Description The issue allows an attacker to inject malicious PHP code as a username while changing their username and password. After the attacker logs in to the application, their code will be executed, enabling an authenticated user to run commands on the server.

Recommendations For CMSuno version 1.6.2, as a temporary workaround, consider disabling the username change functionality until a patch is available. Restrict access to the login module to minimize the risk of exploitation. Avoid using the username variable in the affected login endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2020-25557

Affected Products

Cmsuno

References · 8

• 🔥 https://exploit-db.com/exploits/49485 · Exploit
• 🔥 https://fatihhcelik.blogspot.com/2020/09/cmsuno-162-remote-code-execution.html · Exploit
• 🔥 http://packetstormsecurity.com/files/161162/CMSUno-1.6.2-Remote-Code-Execution.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-25557 · Security Note
• https://osv.dev/vulnerability/CVE-2020-25557 · Vendor Advisory
• https://t.me/cibsecurity/16297 · Telegram Post
• https://twitter.com/WolfgangSesin/status/1878009780444246140 · Twitter Post
• https://t.me/cvenotify/9050 · Telegram Post