← CVE Intelligence

CVE-2018-17888

NUUO / NUUO CMS PUBLISHED

Description (CNA)

NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which could allow arbitrary remote code execution.

Affected (CNA)

Vendor / productVersions
NUUO / NUUO CMSaffected All versions 3.1 and prior

CWE

CWE-330

References

ADP enrichment

CVE

No English description supplied.