CyberSecBulletin

QiboSoft vulnerabilities

We track 2 vulnerabilities in QiboSoft products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 20, 2025.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest QiboSoft vulnerabilities

  • 7.5 High severity

    Qibocms X1: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2025-22973QiboSoft

    An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/application/common. php' file that directly retrieves the URL request response content.

  • 9.8 Critical severity

    QiboCMS X1: Deserialization of Untrusted Data

    CVE-2024-1225QiboSoft

    A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6. Affected by this vulnerability is the function rmb_pay of the file /application/index/controller/Pay.php. The manipulation of the argument callback_class leads to deserializat