High severity7.2NVD Advisory· Published May 21, 2021· Updated Jun 17, 2026

CVE-2021-27811

Description

A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execute arbitrary PHP code via exploitation of client_upgrade_edition.php and Upgrade.php.

Affected products

QibosoftX1/QibosoftX1description
Qibosoft/qibosoft2 versions
cpe:2.3:a:qibosoft:qibosoft:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:qibosoft:qibosoft:1.0:*:*:*:*:*:*:*
- (no CPE)range: = 1.0

Patches

Vulnerability mechanics

References

github.com/whiskey-jj/w2s2x2222.github.io/issues/2nvdExploitIssue TrackingThird Party Advisory
www.cnvd.org.cn/flaw/show/2297879nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000