Security Advisory
CVE-2018-18083
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing.