high7.5
CVE-2025-22973
An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/application/common.
Impact
An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/application/common. php' file that directly retrieves the URL request response content.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qibosoft | Qibocms X1 | All versions |