Security Advisory

CVE-2018-18083

9.8
CRITICAL

Vulnerability Description

An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing.
Published Date October 9, 2018
Official Source NIST NVD Advisory