Every CVE whose affected-product data names Comsenz Duomicms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2018-18083 — CVSS 9.8 (critical): An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is…
CVE-2018-18084 — CVSS 9.8 (critical): An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter.