TI-2024-03523 CVE-2024-3777 · GHSA-v8f2-89xw-2297
Ai3 QbiBot - Broken Access Control
Priority MEDIUM 50
The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthenticated remote attackers to reset any user's password.
Ai3
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Ai3 records in CISA KEVNo Ai3 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2025-08832 CVE-2025-9639 · GHSA-hr5w-2jcm-x89v
Ai3｜QbiCRMGateway - Arbitrary File Reading through Path Traversal
Priority MEDIUM 45
The QbiCRMGateway developed by Ai3 has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.
TI-2024-03524 CVE-2024-3778 · GHSA-895x-rw6g-623x
Ai3 QbiBot - Unrestricted File Upload
Priority LOW 35
The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attackers with administrator privilege to upload files with dangerous type containing malicious code.
TI-2024-06671 CVE-2024-7204 · GHSA-3qp2-9c8g-2g8x
Ai3 QbiBot - Stored XSS
Priority LOW 27
Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into the chat box.