Duomicms@3.0 Security Vulnerabilities and Issues — Duomicms@3.0 CVE List

Lucene search

ComsenzDuomicms3.0

2 matches found

CVE•added 2018/10/09 6:29 p.m.•32 views

CVE-2018-18084

An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter.

9.8CVSS9.8AI score0.00264EPSS

CVE•added 2018/10/09 6:29 p.m.•29 views

CVE-2018-18083

An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing.

9.8CVSS9.6AI score0.01185EPSS