QI
Product
Qibosoft
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 3Low 0
Watch
Add Qibosoft to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-17613 | 9.8 | Oct 15 | qibosoft 7 allows remote code execution because do/jf.php makes eval calls Affected: 7.0 |
| CVE-2020-20944 | 9.1 | Dec 27 | An issue in /admin/index.php?lfj=mysql&action=del of Qibosoft v7 allows attackers to arbitrarily delete files Affected: 7.0 |
| CVE-2020-20945 | 8.8 | Dec 27 | A Cross-Site Request Forgery (CSRF) in /admin/index.php?lfj=member&action=editmember of Qibosoft v7 allows attackers to arbitrarily add administrator accounts Affected: 7.0 |
| CVE-2018-18201 | 8.8 | Oct 9 | qibosoft V7.0 allows CSRF via admin/index.php?lfj=member&action=addmember to add a user account Affected: 7.0 |
| CVE-2019-5725 | 7.5 | Jan 8 | qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonstrated by SSRF to a URL on the same web site to read a .sql… Affected: through 7.0 |
| CVE-2021-27811 | 7.2 | May 21 | A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0 Affected: 1.0 |
| CVE-2020-20808 | 6.1 | Aug 3 | Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd and starttijd parameters of… Affected: 7.0 |
| CVE-2020-20946 | 5.4 | Dec 27 | Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component /admin/index.php?lfj=friendlink&action=add Affected: 7.0 |
| CVE-2020-20943 | 4.3 | Dec 27 | A Cross-Site Request Forgery (CSRF) in /member/post.php?job=postnew&step=post of Qibosoft v7 allows attackers to force victim users into arbitrarily publishing new articles via a… Affected: 7.0 |
Showing 9