high7.2
CVE-2021-27811
A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0.
Impact
A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execute arbitrary PHP code via exploitation of client_upgrade_edition.php and Upgrade.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qibosoft | Qibosoft | Version 1.0 |