Description
qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonstrated by SSRF to a URL on the same web site to read a .sql file.
Unscored
CVE-2019-5725
EUVD-2019-15299GHSA-544h-w96w-xp69
qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonstrated by SSRF to a U…
Published Jan 8, 2019 · Updated Sep 16, 2024 · Assigned by mitre