CVE-2018-18982 | BDVDB-2026-109873 Detail

NUUO CMS

Description#

NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

https://www.exploit-db.com/exploits/46449/
https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02

Exploit#

https://www.exploit-db.com/exploits/46449/

History#

Version 12018-11-27Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.