auxiliary/gather/nuuo_cms_file_download

functional

Nuuo Central Management Server Authenticated Arbitrary File Download

view exploit source metasploittype auxiliarypublished 2018-10-11catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-17934US	critical9.8	19.7% (97th)	Exploit	2018-11-27
NUUO CMS All versions 3.3 and prior the application allows external input to construct a pathname that is able to be resolved outside the intended directory. This could allow an at…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.