Vulnerability Description
NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution.
CVSS Score
8.8
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nuuo | Nuuo Cms | <= 3.3 |
Related Weaknesses (CWE)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02Third Party AdvisoryUS Government Resource
- https://www.exploit-db.com/exploits/46449/ExploitThird Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02Third Party AdvisoryUS Government Resource
- https://www.exploit-db.com/exploits/46449/ExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2018-18982?
CVE-2018-18982 is a vulnerability with a CVSS score of 8.8 (HIGH). NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execut...
How severe is CVE-2018-18982?
CVE-2018-18982 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-18982?
Check the references section above for vendor advisories and patch information. Affected products include: Nuuo Nuuo Cms.