DuomiCMS SQL Injection

DuomiCMS was affected by SQL Injection vulnerability which exists in ajax.php file.A successful exploitation will enable a remote attacker to inject malicious SQL queries statements that would tamper the database structure which will eventually impact on confidentiality, integrity, and availability.

Mitigation / Precaution

Our recommendation is to upgrade DuomiCMS to the latest version to patch this vulnerability.

Written by

Rejah Rehim

Co-founder, Director