critical9.8
CVE-2025-29058
An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component.
Impact
An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qimou Cms Project | Qimou Cms | Version 3.34.0 |