98 matches found
CVE-2025-22973
An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the httpcurl function in the '/application/common. php' file that directly retrieves the URL request response content...
CVE-2025-22973
An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the httpcurl function in the '/application/common. php' file that directly retrieves the URL request response content...
PT-2025-7543 · Qibosoft · Qibocms
Name of the Vulnerable Software and Affected Versions: QiboSoft QiboCMS version X1.0 Description: An issue in QiboSoft QiboCMS allows a remote attacker to obtain sensitive information via the http curl function in the '/application/common.php' file that directly retrieves the URL request response...
CVE-2025-22973
An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the httpcurl function in the '/application/common. php' file that directly retrieves the URL request response content...
CVE-2025-22973
CVE-2025-22973 affects QiboSoft QiboCMS X1.0. The vulnerability is caused by the http_curl() function in /application/common.php, which directly retrieves the URL request response content, enabling a remote attacker to disclose sensitive information. The CVSS v3.1 vector indicates Network access,...
Qibosoft QiboCMS 安全漏洞
Qibosoft QiboCMS is an application software from China Qibosoft Qibosoft company. A website builder CMS. A security vulnerability exists in Qibosoft QiboCMS version X1.0, which originates from the ability to retrieve sensitive information by directly retrieving the URL request response content vi...
CVE-2024-1225
A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6. Affected by this vulnerability is the function rmbpay of the file /application/index/controller/Pay.php. The manipulation of the argument callbackclass leads to deserialization. The attack can be launched remotel...
CVE-2024-1225
A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6. Affected by this vulnerability is the function rmbpay of the file /application/index/controller/Pay.php. The manipulation of the argument callbackclass leads to deserialization. The attack can be launched remotel...
Deserialization of untrusted data
A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6. Affected by this vulnerability is the function rmbpay of the file /application/index/controller/Pay.php. The manipulation of the argument callbackclass leads to deserialization. The attack can be launched remotel...
CVE-2024-1225
CVE-2024-1225 affects QiboSoft QiboCMS X1 up to 1.0.6. The vulnerability resides in the Pay.php function rmb_pay, where manipulating the callback_class argument leads to deserialization. The issue can be exploited remotely and has been publicly disclosed. Connected sources consistently describe a...
CVE-2024-1225 QiboSoft QiboCMS X1 Pay.php rmb_pay deserialization
A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6. Affected by this vulnerability is the function rmbpay of the file /application/index/controller/Pay.php. The manipulation of the argument callbackclass leads to deserialization. The attack can be launched remotel...
CVE-2024-1225 QiboSoft QiboCMS X1 Pay.php rmb_pay deserialization
A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6. Affected by this vulnerability is the function rmbpay of the file /application/index/controller/Pay.php. The manipulation of the argument callbackclass leads to deserialization. The attack can be launched remotel...
Qibosoft QiboCMS Code Issue Vulnerability
Qibosoft QiboCMS is an application software of China Qibo Software Qibosoft Company. A website builder CMS. A code issue vulnerability exists in Qibosoft QiboCMS versions X1 through 1.0.6, which stems from the parameter callbackclass in file /application/index/controller/Pay.php that causes...
CVE-2020-20808
Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php...
CVE-2020-20808
Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php...
Cross site scripting
Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php...
CVE-2020-20808
Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php...
CVE-2020-20808
Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php...
CVE-2020-20808
CVE-2020-20808 is a Cross Site Scripting vulnerability affecting Qibosoft qibosoft v7 and earlier. The issue arises in the do/search.php endpoint via the eindtijd and starttijd parameters, enabling a remote attacker to execute arbitrary code. Affected versions are explicitly listed as v7 and earl...