CVE-2018-18083: Comsenz Duomicms

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is used during "if" processing.

Affected products

• Comsenz Duomicms: version 3.0 only

Published 2018-10-09. Last modified 2026-06-17.