Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Qibosoft Subscribe
Filtered by product Qibocms
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-27037 1 Qibosoft 1 Qibocms 2023-03-21 N/A 8.8 HIGH
Qibosoft QiboCMS v7 was discovered to contain a remote code execution (RCE) vulnerability via the Get_Title function at label_set_rs.php
CVE-2020-18022 1 Qibosoft 1 Qibocms 2021-05-10 4.3 MEDIUM 6.1 MEDIUM
Cross Site Scripting (XSS) in Qibosoft QiboCMS v7 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information by injecting arbitrary commands in a HTTP request to the "ewebeditor\3.1.1\kindeditor.js" component.