Security Advisory
CVE-2018-18084
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter.