CVE-2025-29058

Qimou CMS version 3.34.0 is vulnerable to a Remote Code Execution (RCE) flaw located in the upgrade.php component. The root cause is identified as Improper Control of Generation of Code (CWE-94) . A remote attacker can exploit this issue to execute arbitrary code on the affected system. To mitiga...