Unrated severityNVD Advisory· Published Oct 12, 2018· Updated Sep 17, 2024

CVE-2018-17888

Description

NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which could allow arbitrary remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Kalmia/CMSllm-fuzzy
Range: <= 3.1
Nuuo/Nuuo CMSv5
Range: All versions 3.1 and prior

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105717mitrevdb-entryx_refsource_BID
ics-cert.us-cert.gov/advisories/ICSA-18-284-02mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.024
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000