TI-2024-01139 CVE-2024-1225 · GHSA-5rfj-4v26-hqmw
QiboSoft QiboCMS X1 Pay.php rmb_pay deserialization
Priority MEDIUM 50
A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6.
No QiboSoft vulnerabilities are listed in CISA KEV.
2 records in Qibocms X1 · all components
A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6.
An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/application/common.