# Xibo CMS has 5 vulnerabilities, including remote code execution and SQL injection

- Date: 2023-05-30
- Location: Global
- Type: Vulnerability
- Sector: Vendor
- CVE: CVE-2023-33177, CVE-2023-33178, CVE-2023-33179, CVE-2023-33180, CVE-2023-33181
- Products: [Xibo](https://signagelist.org/products/xibo/)

NVD published 5 vulnerabilities in Xibo CMS, covering remote code execution, SQL injection and security flaw. Xibo is a content management system (CMS).

## Sources

- [CVE-2023-33177](https://nvd.nist.gov/vuln/detail/CVE-2023-33177) (NIST NVD)
- [CVE-2023-33178](https://nvd.nist.gov/vuln/detail/CVE-2023-33178) (NIST NVD)
- [CVE-2023-33179](https://nvd.nist.gov/vuln/detail/CVE-2023-33179) (NIST NVD)
- [CVE-2023-33180](https://nvd.nist.gov/vuln/detail/CVE-2023-33180) (NIST NVD)
- [https://claroty.com/team82/disclosure-dashboard](https://claroty.com/team82/disclosure-dashboard)
- [https://github.com/xibosignage/xibo-cms/commit/1cbba380fa751a00756e70d7b08b5c6646092658](https://github.com/xibosignage/xibo-cms/commit/1cbba380fa751a00756e70d7b08b5c6646092658)

Page: https://signagelist.org/incidents/2023-05-xibo-cms-has-5-vulnerabilities-including-remote/