Lucene search
+L

78 matches found

CNNVD
CNNVD
added 2024/02/05 12:00 a.m.10 views

Qibosoft QiboCMS Code Issue Vulnerability

Qibosoft QiboCMS is an application software of China Qibo Software Qibosoft Company. A website builder CMS. A code issue vulnerability exists in Qibosoft QiboCMS versions X1 through 1.0.6, which stems from the parameter callbackclass in file /application/index/controller/Pay.php that causes...

9.8CVSS7.1AI score0.00871EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/05 12:00 a.m.9 views

PT-2024-17507 · Qibosoft · Qibocms X1

Name of the Vulnerable Software and Affected Versions: QiboSoft QiboCMS X1 versions up to 1.0.6 Description: A critical vulnerability was found in the function rmb pay of the file /application/index/controller/Pay.php. The manipulation of the argument callback class leads to deserialization. The...

9.8CVSS7.3AI score0.00871EPSS
SaveExploits0References8
NVD
NVD
added 2023/03/16 3:15 p.m.25 views

CVE-2023-27037

Qibosoft QiboCMS v7 was discovered to contain a remote code execution RCE vulnerability via the GetTitle function at labelsetrs.php...

8.8CVSS9.1AI score0.01488EPSS
SaveExploits1References1
OSV
OSV
added 2023/03/16 3:15 p.m.8 views

CVE-2023-27037

Qibosoft QiboCMS v7 was discovered to contain a remote code execution RCE vulnerability via the GetTitle function at labelsetrs.php...

8.8CVSS7.9AI score0.01488EPSS
SaveExploits1References1
Prion
Prion
added 2023/03/16 3:15 p.m.26 views

Remote code execution

Qibosoft QiboCMS v7 was discovered to contain a remote code execution RCE vulnerability via the GetTitle function at labelsetrs.php...

6.5CVSS9.1AI score0.01488EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/03/16 12:00 a.m.10 views

Qibosoft QiboCMS SQL注入漏洞

Qibosoft QiboCMS is an application software of China Qibo Software Qibosoft Company. A website builder CMS. A security vulnerability exists in Qibosoft QiboCMS v7, which originates from the GetTitle function in labelsetrs.php contains a Remote Code Execution RCE vulnerability...

8.8CVSS8.2AI score0.01488EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/03/16 12:00 a.m.11 views

CVE-2023-27037

Qibosoft QiboCMS v7 was discovered to contain a remote code execution RCE vulnerability via the GetTitle function at labelsetrs.php...

9.1AI score0.01488EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/03/16 12:00 a.m.31 views

CVE-2023-27037

Qibosoft QiboCMS v7 was discovered to contain a remote code execution RCE vulnerability via the GetTitle function at labelsetrs.php...

9.3AI score0.01488EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/03/16 12:00 a.m.12 views

PT-2023-20911 · Qibosoft · Qibocms

Name of the Vulnerable Software and Affected Versions: Qibosoft QiboCMS version 7 Description: The issue is related to a remote code execution RCE vulnerability. It is exploited via the Get Title function at the label set rs.php file. Recommendations: For Qibosoft QiboCMS version 7, consider...

8.8CVSS8.8AI score0.01488EPSS
SaveExploits1References3
CVE
CVE
added 2023/03/16 12:00 a.m.93 views

CVE-2023-27037

Qibosoft QiboCMS v7 is affected by a remote code execution (RCE) vulnerability in the Get_Title function of label_set_rs.php. The CVE entry CVE-2023-27037 documents impact on QiboCMS v7 and indicates high-severity risk (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C/H/I/H). Several connected sources corrobo...

8.8CVSS9AI score0.01488EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2021/04/28 4:15 p.m.15 views

CVE-2020-18022

Cross Site Scripting XSS in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the "ewebeditor\3.1.1\kindeditor.js" component...

6.1CVSS0.01246EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/28 4:15 p.m.8 views

CVE-2020-18022

Cross Site Scripting XSS in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the "ewebeditor\3.1.1\kindeditor.js" component...

6.1CVSS6.1AI score0.01246EPSS
SaveExploits1References1
CVE
CVE
added 2021/04/28 3:18 p.m.54 views

CVE-2020-18022

CVE-2020-18022 affects Qibosoft QiboCMS v7 and earlier via a flaw in the embedded editor component (ewebeditor 3.1.1 / kindeditor.js). The vulnerability allows remote attackers to inject commands through HTTP requests, enabling Cross Site Scripting (XSS) that can lead to arbitrary code execution ...

6.1CVSS6.5AI score0.01246EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/04/28 12:00 a.m.10 views

Qibosoft QiboCMS 跨站脚本漏洞

Qibo QiboCMS is a software application of China Qibo Qibo company. A website building CMS. A cross-site scripting vulnerability exists in Qibosoft QiboCMS v7 and earlier versions, which allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary comman...

6.1CVSS6.5AI score0.01246EPSS
SaveExploits1References2
seebug.org
seebug.org
added 2016/04/23 12:00 a.m.27 views

qibocms 地方门户系统zhuangxiu/list.php处注入

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/01/26 12:00 a.m.27 views

齐博(qibocms) /blog/template/space/file/listbbs.php $TB_pre 参数SQL注入漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/01/09 12:00 a.m.20 views

QiboCMS地方门户系统文件coupon/s.php存在SQL注入漏洞

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2015/10/10 12:00 a.m.28 views

qibocms考试系统sql注入

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2015/09/30 12:00 a.m.22 views

qibocms 地方门户 LFI漏洞 可Getshell

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2015/09/29 12:00 a.m.59 views

qibocms v7.0 任意文件下载漏洞

No description provided by source...

7.1AI score
SaveExploits0
Rows per page
Query Builder