CVE-2019-5725

Name of the Vulnerable Software and Affected Versions qibosoft versions through V7

Description The issue allows remote attackers to read arbitrary files via the main parameter in member/index.php, which can be exploited through Server-Side Request Forgery (SSRF) to read sensitive files, such as .sql files, on the same web site.

Recommendations For versions through V7, restrict access to the member/index.php endpoint to minimize the risk of exploitation, and avoid using the main parameter until the issue is resolved.