Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ai3 QbiBot - Unrestricted File Upload
Vulnerability Description
The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attackers with administrator privilege to upload files with dangerous type containing malicious code.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
Ai3 QbiBot 代码问题漏洞
Vulnerability Description
Ai3 QbiBot是中国Ai3公司的一个智能客服。 Ai3 QbiBot v8.0.4及之前版本存在代码问题漏洞，该漏洞源于存在文件上传漏洞。攻击者可利用该漏洞上传包含恶意代码的文件。
CVSS Information
N/A
Vulnerability Type
N/A