CVE-2018-18982

2018-11-2721:00:00

CWE-89

icscert

www.cve.org

AI Score

9.2

Confidence

High

EPSS

0.109

Percentile

95.2%

JSON

NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution.

CNA Affected

[
  {
    "product": "NUUO CMS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions 3.3 and prior"
      }
    ]
  }
]