- Description
- An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/application/common. php' file that directly retrieves the URL request response content.
- Source
- cve@mitre.org
- NVD status
- Analyzed
- Products
- qibocms_x1
CVSS 3.1
- Type
- Secondary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity
- HIGH
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-200
- Hype score
- Not currently trending
🚨 CVE-2025-22973 🔴 HIGH (7.5) 🏢 Unknown Vendor - Unknown Product 🏗️ Unknown Version 🔗 https://t.co/rGrqdjip1m #CyberCron #VulnAlert https://t.co/Q56q6sQa9Y
@cybercronai
22 Feb 2025
19 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-22973 02/20/2025 11:15:12 PM BaseSeverity: HIGH An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/application/common. php' ... https://t.co/BgDTMXUqiW
@CVETracker
21 Feb 2025
12 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-22973 An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/application/common. php' file that di… https://t.co/Yllvj3eSmi
@CVEnew
20 Feb 2025
356 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:qibosoft:qibocms_x1:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A2BE41D-097A-4E9E-9862-D70BEF892278"
}
],
"operator": "OR"
}
]
}
]