Vulnerabilities

TI-2023-11882 CVE-2023-27037 · GHSA-ccfg-9f3p-jm5r

Qibosoft QiboCMS v7 was discovered to contain a remote code execution (RCE) vulnerability…

MEDIUM 43

Qibosoft QiboCMS v7 was discovered to contain a remote code execution (RCE) vulnerability via the Get_Title function at label_set_rs.php

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01488 Published 2023-03-16 No fix listed CWE-89

TI-2020-13299 CVE-2020-18022 · GHSA-qvv7-r585-pv54

Cross Site Scripting (XSS) in Qibosoft QiboCMS v7 and earlier allows remote attackers to…

LOW 30

Cross Site Scripting (XSS) in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the "ewebeditor\3.1.1\k…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01246 Published 2021-04-28 No fix listed CWE-79

Vulnerabilities

Filters

Qibosoft QiboCMS v7 was discovered to contain a remote code execution (RCE) vulnerability…

Cross Site Scripting (XSS) in Qibosoft QiboCMS v7 and earlier allows remote attackers to…