An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/application/common. php' file that directly retrieves the URL request response content.

Last Modified: Jun 18, 2025

Published: Feb 20, 2025

CVE-2024-1225

QiboSoft QiboCMS X1 Pay.php rmb_pay deserialization

Last Modified: May 15, 2025

Published: Feb 05, 2024

CVE-2020-20808

Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php.

Last Modified: Nov 21, 2024

Published: Aug 03, 2023

CVE-2023-27037

Qibosoft QiboCMS v7 was discovered to contain a remote code execution (RCE) vulnerability via the Get_Title function at label_set_rs.php

Last Modified: Feb 26, 2025

Published: Mar 16, 2023

CVE-2020-20946

Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component /admin/index.php?lfj=friendlink&action=add.

Last Modified: Nov 21, 2024

Published: Dec 27, 2021

Items Per Page