High · 7.5 CVE-2025-22973 EUVD-2025-4510GHSA-44g2-wmg5-f6v6

An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/applicatio…

Published Feb 20, 2025 · Updated Feb 21, 2025 · Assigned by mitre

Description

An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/application/common. php' file that directly retrieves the URL request response content.

References

https://github.com/202110420106/CVE/blob/master/CVE-2025-22973.md