Nuuo Nuuo_cms
7 CVEs affecting Nuuo Nuuo_cms. Latest disclosed: 2018-11-27. Critical: 5, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-17936 | Critical | 9.8 | 2018-11-27 | NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to the server, which… |
CVE-2018-17934 | Critical | 9.8 | 2018-11-27 | NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory. T… |
CVE-2018-17894 | Critical | 9.8 | 2018-10-12 | NUUO CMS all versions 3.1 and prior, The application creates default accounts that have hard-coded passwords, which could allow an attacker to gain privileged… |
CVE-2018-17890 | Critical | 9.8 | 2018-10-12 | NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, which could allow arbitrary code executi… |
CVE-2018-17888 | Critical | 9.8 | 2018-10-12 | NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which… |
CVE-2018-18982 | High | 8.8 | 2018-11-27 | NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing… |
CVE-2018-17892 | High | 8.8 | 2018-10-12 | NUUO CMS all versions 3.1 and prior, The application implements a method of user account control that causes standard account security features to not be utili… |