Skip to content
Sign in
Not rated

CVE-2018-17934 NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be…

Description

NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory. This could allow an attacker to impersonate a legitimate user, obtain restricted information, or execute arbitrary code.

Affected products and versions

Product Affected versions Fixed in
NUUO CMS Versions not published

Other CVEs of NUUO CMS

The 3 CVEs of NUUO CMS →
CVE-2018-17936 NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite… Not rated CVE-2018-18982 NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can… Not rated
Track this CVE