QiboCMS X1 vulnerabilities

2 known vulnerabilities in QiboCMS X1 from QiboSoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Qibocms X1: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2025-22973Feb 20, 2025QiboSoft

  An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/application/common. php' file that directly retrieves the URL request response content.

• 9.8 Critical severity

  QiboCMS X1: Deserialization of Untrusted Data

  CVE-2024-1225Feb 5, 2024QiboSoft

  A vulnerability classified as critical was found in QiboSoft QiboCMS X1 up to 1.0.6. Affected by this vulnerability is the function rmb_pay of the file /application/index/controller/Pay.php. The manipulation of the argument callback_class leads to deserializat