RSS   Vulnerabilities for 'Qibosoft'   RSS

2019-01-08
 
CVE-2019-5725

CWE-918
 

 
qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonstrated by SSRF to a URL on the same web site to read a .sql file.

 
2018-10-09
 
CVE-2018-18201

CWE-352
 

 
qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account.

 

 >>> Vendor: Qibosoft 2 Products
Qi bo cms
Qibosoft


Copyright 2019, cxsecurity.com

 

Back to Top