← Database

CVE-2025-29058

CRITICAL CVSS: 9.8 Published: 2025-04-18 Modified: 2026-06-17

Description

An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component.

Affected Platforms

Qimou Cms Project Qimou Cms

Weakness Type

CWE-94

References