{"id":"CVE-2018-17936","state":"PUBLISHED","title":"NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to the server, which could allow remote co","description":"NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to the server, which could allow remote code execution.","publishedAt":"2018-11-27T21:00:00.000Z","updatedAt":"2024-08-05T11:01:14.717Z","severity":null,"assigner":"icscert","products":["n/a NUUO CMS"],"affected":[{"vendor":"n/a","product":"NUUO CMS","versions":[{"version":"All versions 3.3 and prior","status":"affected"}]}],"references":["https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02"],"weaknesses":["CWE-434"],"ingestedAt":"2026-10-29T19:44:28.183Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/17xxx/CVE-2018-17936.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-17936","state":"PUBLISHED","datePublished":"2018-11-27T21:00:00.000Z","dateUpdated":"2024-08-05T11:01:14.717Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2018-10-02T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to the server, which could allow remote code execution."}],"affected":[{"vendor":"n/a","product":"NUUO CMS","versions":[{"version":"All versions 3.3 and prior","status":"affected"}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-434","description":"UNRESTRICTED UPLOAD OF FILE WITH DANGEROUS TYPE CWE-434","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"icscert","dateUpdated":"2018-11-27T19:57:01.000Z","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6"},"datePublic":"2018-11-27T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","ID":"CVE-2018-17936","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"NUUO CMS","version":{"version_data":[{"version_value":"All versions 3.3 and prior"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"NUUO CMS All versions 3.3 and prior the application allows the upload of arbitrary files that can modify or overwrite configuration files to the server, which could allow remote code execution."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"UNRESTRICTED UPLOAD OF FILE WITH DANGEROUS TYPE CWE-434"}]}]},"references":{"reference_data":[{"name":"https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02","refsource":"MISC","url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T11:01:14.717Z"}}]}}}