RSS   Podatności dla 'Qibosoft'   RSS

2021-12-27
 
CVE-2020-20946

CWE-79
 
 
Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component /admin/index.php?lfj=friendlink&action=add.

 
2019-01-08
 
CVE-2019-5725

CWE-918
 
 
qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonstrated by SSRF to a URL on the same web site to read a .sql file.

 
2018-10-09
 
CVE-2018-18201

CWE-352
 
 
qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account.

 

 >>> Vendor: Qibosoft 2 Produkty
Qi bo cms
Qibosoft

Copyright 2024, cxsecurity.com

 

Back to Top