description: NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers to obtain the active session ID, which could allow arbitrary remote code execution.
problem types: USE OF INSUFFICIENTLY RANDOM VALUES CWE-330
affected:
{
product: NUUO CMS
vendor: NUUO
versions:
status: affected, version: All versions 3.1 and prior
}