QiboSoft

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

QiboSoft records in CISA KEV

No QiboSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Qibosoft 9 records MEDIUM Qibocms 2 records MEDIUM Qibocms X1 2 records MEDIUM Qi Bo Cms 1 record LOW

Records

9 records in Qibosoft · all components

TI-2020-13932 CVE-2020-20808 · GHSA-339g-p78w-jq7j

Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote…

MEDIUM 60

Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of do/search.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0066 Published 2023-08-03 No fix listed CWE-79

TI-2019-13148 CVE-2019-17613 · GHSA-4vq4-r5xv-jfr9

qibosoft 7 allows remote code execution because do/jf.php makes eval calls.

MEDIUM 47

qibosoft 7 allows remote code execution because do/jf.php makes eval calls.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02857 Published 2019-10-15 No fix listed CWE-94

TI-2020-13947 CVE-2020-20944 · GHSA-gv2g-7fvc-9fc7

An issue in /admin/index.php?lfj=mysql&action=del of Qibosoft v7 allows attackers to arbitrarily delete files.

MEDIUM 43

An issue in /admin/index.php?lfj=mysql&action=del of Qibosoft v7 allows attackers to arbitrarily delete files.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02022 Published 2021-12-27 No fix listed CWE-22

TI-2020-13948 CVE-2020-20945 · GHSA-979v-h9jj-r442

A Cross-Site Request Forgery (CSRF) in /admin/index.php?lfj=member&action=editmember of…

LOW 39

A Cross-Site Request Forgery (CSRF) in /admin/index.php?lfj=member&action=editmember of Qibosoft v7 allows attackers to arbitrarily add administrator accounts.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00573 Published 2021-12-27 No fix listed CWE-352

TI-2018-12874 CVE-2018-18201 · GHSA-m2x2-rjfm-4jfr

qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account.

LOW 39

qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00494 Published 2018-10-09 No fix listed CWE-352

TI-2019-04058 CVE-2019-5725 · GHSA-544h-w96w-xp69

qibosoft through V7 allows remote attackers to read arbitrary files via the…

LOW 36

qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonstrated by SSRF to a URL on the same web site to read a .sql file.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01493 Published 2019-01-08 No fix listed CWE-918

TI-2021-09196 CVE-2021-27811 · GHSA-2p4f-q7g6-g44m

A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1…

LOW 34

A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01198 Published 2021-05-21 No fix listed CWE-94

TI-2020-13949 CVE-2020-20946 · GHSA-9j36-mrwp-v6cg

Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component…

LOW 25

Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component /admin/index.php?lfj=friendlink&action=add.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2021-12-27 No fix listed CWE-79

TI-2020-13946 CVE-2020-20943 · GHSA-6fjf-2cgp-836f

A Cross-Site Request Forgery (CSRF) in /member/post.php?job=postnew&step=post of Qibosoft…

LOW 20

A Cross-Site Request Forgery (CSRF) in /member/post.php?job=postnew&step=post of Qibosoft v7 allows attackers to force victim users into arbitrarily publishing new articles via a crafted URL.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00394 Published 2021-12-27 No fix listed CWE-352

Open these records in search →

Critical	3
High	6
Medium	5
Low	0
No CVSS	0