CVE-2018-18982 NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execut...
HighCVSS 8.8
EPSS 62.5%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nuuo cms | <= 3.3 | No fix listed |
References
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- 46449 exploit third-party-advisory vdb-entry