DuomiCMS was affected by SQL Injection vulnerability which exists in ajax.php file.A successful exploitation will enable a remote attacker to inject malicious SQL queries statements that would tamper the database structure which will eventually impact on confidentiality, integrity, and availability.
Our recommendation is to upgrade DuomiCMS to the latest version to patch this vulnerability.