high8.8Public exploit code
CVE-2018-18982
NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Nuuo Central Management - (Authenticated) SQL Server SQL Injection (Metasploit)2019-02-22 · remote · windows · Verified
Impact
NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nuuo | Nuuo Cms | through 3.3 |