Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-11-27	CVE-2018-18982	SQL Injection vulnerability in Nuuo CMS 3.1/3.3 NUUO CMS All versions 3.3 and prior the web server application allows injection of arbitrary SQL characters, which can be used to inject SQL into an executing statement and allow arbitrary code execution. network low complexity nuuo CWE-89	6.5
2018-10-12	CVE-2018-17892	Unspecified vulnerability in Nuuo CMS 3.1 NUUO CMS all versions 3.1 and prior, The application implements a method of user account control that causes standard account security features to not be utilized as intended, which could allow user account compromise and may allow for remote code execution. network low complexity nuuo	6.5