98 matches found
CVE-2019-17613
CVE-2019-17613 affects qibosoft 7. The vulnerability is due to do/jf.php performing eval on input, enabling remote code execution. An attacker can leverage the Point Introduction Management feature to inject PHP code to be evaluated, or exploit CSRF via admin/index.php?lfj=jfadmin&action=addjf (p...
CVE-2019-17613
qibosoft 7 allows remote code execution because do/jf.php makes eval calls. The attacker can use the Point Introduction Management feature to supply PHP code to be evaluated. Alternatively, the attacker can access admin/index.php?lfj=jfadmin&action=addjf via CSRF, as demonstrated by a payload in...
CVE-2019-5725
qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonstrated by SSRF to a URL on the same web site to read a .sql file...
CVE-2019-5725
qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonstrated by SSRF to a URL on the same web site to read a .sql file...
CVE-2019-5725
qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonstrated by SSRF to a URL on the same web site to read a .sql file...
CVE-2019-5725
CVE-2019-5725 affects qibosoft through V7 (CMS) and is caused by a flaw in member/index.php main parameter that enables SSRF, allowing remote attackers to read arbitrary files on the server (demonstrated to read a .sql file on the same site). This results in potential exposure of sensitive data v...
qibosoft Cross-Site Request Forgery Vulnerability
qibosoft is a content management system of China Qibo Software qibosoft Company. A cross-site request forgery vulnerability exists in qibosoft version 7.0. A remote attacker can add a user account using admin/index.php?lfj=member&action=addmember to exploit this vulnerability...
CVE-2018-18201
qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account...
Cross site request forgery (csrf)
qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account...
CVE-2018-18201
qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account...
CVE-2018-18201
qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account...
CVE-2018-18201
CVE-2018-18201 affects qibosoft V7.0. The connected CNVD/NVD entries describe a Cross-Site Request Forgery (CSRF) vulnerability that can be triggered via the URL pattern: admin/index.php?lfj=member&action=addmember, enabling an attacker to add a user account. The documents do not provide details ...
齐博CMS程序又发现存在一处恶意后门（可执行任意代码）
简要描述： zone里看到有说齐博存在后门，于是下载了源码，发现另一处后门，只能说太贱了！ 详细说明： 路径：inc/splitword.php 代码： ?php / Powered by www.qibosoft.com...
php168 know the system injection vulnerability-vulnerability warning-the black bar safety net
I'm finishing up the three keywords inurl:zhidao Powered by qibosoft inurl:w8 Powered by qibosoft inurl:ask Powered by qibosoft http://v7.php168.com/zhidao/user.php?j=question&u=-1+union+select+1,2,3,concatuser,0x3a,version,0x3a,database,5,6,7,8-- The official website of the test ! Database...
Qi Bo CMS know that the system injection vulnerability-vulnerability warning-the black bar safety net
php168 know the system injection vulnerability Ps:inadvertently come I'm finishing up the three keywords inurl:zhidao Powered by qibosoft inurl:w8 Powered by qibosoft inurl:ask Powered by qibosoft...
CVE-2011-1064
SQL injection vulnerability in member/list.php in qibosoft Qi Bo CMS 7 allows remote attackers to execute arbitrary SQL commands via the aidDB parameter...
CVE-2011-1064
CVE-2011-1064 involves a SQL injection in the Qi Bo CMS 7, specifically in member/list.php. The vulnerability is triggered via the aidDB[] parameter, allowing remote attackers to execute arbitrary SQL commands. This is a root-cause-driven issue in the application’s handling of user-supplied input...