CVE-2018-18083: Code Injection
Published Oct 9, 2018
·Updated
An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing.
Affected Software
1 affected component
Comsenz Duomicms=3.0
Event History
Oct 9, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-18083?
CVE-2018-18083 is considered a critical vulnerability due to its potential for remote PHP code execution.
2
How do I fix CVE-2018-18083?
Fixing CVE-2018-18083 involves removing the use of the 'eval' function in the search.php file to prevent code execution.
3
Who is affected by CVE-2018-18083?
CVE-2018-18083 affects users of DuomiCMS version 3.0.
4
What type of attack can be executed using CVE-2018-18083?
CVE-2018-18083 allows for remote code execution attacks through manipulation of the searchword parameter.
5
Is CVE-2018-18083 still a risk if the server is behind a firewall?
Yes, CVE-2018-18083 remains a risk even when the server is behind a firewall, as it can be exploited remotely.