Approved changes feed: RSS · Atom

cpe:2.3:a:ai3:qbibot:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorAi3 (ceaef2eb-a32c-55f4-8d79-2a17fbc08804)
ProductQbibot (379bc7fd-cc64-57fd-91f6-d91686356932)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3778 vulnerable 2026-06-08 06:43:51.510577 Ai3 QbiBot - Unrestricted File Upload
HIGH (7.2)
The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attackers with administrator privilege to upload files with dangerous type containing malicious code.
Published: 2024-04-15T03:41:00.113Z
Updated: 2024-08-01T20:20:01.586Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3777 vulnerable 2026-06-08 06:43:51.509962 Ai3 QbiBot - Broken Access Control
CRITICAL (9.8)
The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthenticated remote attackers to reset any user's password.
Published: 2024-04-15T03:26:27.359Z
Updated: 2024-10-14T06:18:27.562Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.