Xbtit
by Bti Tracker
CVEs (11)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-15681 | Cri | 0.64 | 9.8 | 0.01 | Sep 5, 2018 | An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is rehashed using a predictable salt and stored in the "pass" cookie, which is not flagged as HTTPOnly. Due to the weak and predictable salt that is in place, an attacker who successfully… | ||
| CVE-2018-15680 | Cri | 0.64 | 9.8 | 0.01 | Sep 5, 2018 | An issue was discovered in BTITeam XBTIT 2.5.4. The hashed passwords stored in the xbtit_users table are stored as unsalted MD5 hashes, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack. | ||
| CVE-2018-15682 | Hig | 0.57 | 8.8 | 0.01 | Sep 5, 2018 | An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection, it is possible to automate the action of sending private messages to users by luring an authenticated user to a web page that automatically submits a form on their behalf. | ||
| CVE-2018-17870 | Med | 0.40 | 6.1 | 0.01 | Oct 1, 2018 | An issue was discovered in BTITeam XBTIT 2.5.4. The "returnto" parameter of account_change.php is vulnerable to an open redirect, a different vulnerability than CVE-2018-15683. | ||
| CVE-2018-16361 | Med | 0.40 | 6.1 | 0.01 | Sep 5, 2018 | An issue was discovered in BTITeam XBTIT 2.5.4. news.php allows XSS via the id parameter. | ||
| CVE-2018-15683 | Med | 0.40 | 6.1 | 0.01 | Sep 5, 2018 | An issue was discovered in BTITeam XBTIT. The "returnto" parameter of the login page is vulnerable to an open redirect due to a lack of validation. If a user is already logged in when accessing the page, they will be instantly redirected. | ||
| CVE-2018-15679 | Med | 0.40 | 6.1 | 0.01 | Sep 5, 2018 | An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php?page=forums&action=search is vulnerable to reflected cross-site scripting. | ||
| CVE-2018-15678 | Med | 0.40 | 6.1 | 0.01 | Sep 5, 2018 | An issue was discovered in BTITeam XBTIT 2.5.4. The "act" parameter in the sign-up page available at /index.php?page=signup is vulnerable to reflected cross-site scripting. | ||
| CVE-2018-15677 | Med | 0.40 | 6.1 | 0.00 | Sep 5, 2018 | The newsfeed (aka /index.php?page=viewnews) in BTITeam XBTIT 2.5.4 has stored XSS via the title of a news item. This is also exploitable via CSRF. | ||
| CVE-2018-15684 | Med | 0.35 | 5.3 | 0.01 | Sep 5, 2018 | An issue was discovered in BTITeam XBTIT. PHP error logs are stored in an open directory (/include/logs) using predictable file names, which can lead to full path disclosure and leakage of sensitive data. | ||
| CVE-2018-15676 | Med | 0.35 | 5.3 | 0.01 | Sep 5, 2018 | An issue was discovered in BTITeam XBTIT. By using String.replace and eval, it is possible to bypass the includes/crk_protection.php anti-XSS mechanism that looks for a number of dangerous fingerprints. |
- risk 0.64cvss 9.8epss 0.01
An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is rehashed using a predictable salt and stored in the "pass" cookie, which is not flagged as HTTPOnly. Due to the weak and predictable salt that is in place, an attacker who successfully…
- risk 0.64cvss 9.8epss 0.01
An issue was discovered in BTITeam XBTIT 2.5.4. The hashed passwords stored in the xbtit_users table are stored as unsalted MD5 hashes, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack.
- risk 0.57cvss 8.8epss 0.01
An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection, it is possible to automate the action of sending private messages to users by luring an authenticated user to a web page that automatically submits a form on their behalf.
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in BTITeam XBTIT 2.5.4. The "returnto" parameter of account_change.php is vulnerable to an open redirect, a different vulnerability than CVE-2018-15683.
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in BTITeam XBTIT 2.5.4. news.php allows XSS via the id parameter.
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in BTITeam XBTIT. The "returnto" parameter of the login page is vulnerable to an open redirect due to a lack of validation. If a user is already logged in when accessing the page, they will be instantly redirected.
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php?page=forums&action=search is vulnerable to reflected cross-site scripting.
- risk 0.40cvss 6.1epss 0.01
An issue was discovered in BTITeam XBTIT 2.5.4. The "act" parameter in the sign-up page available at /index.php?page=signup is vulnerable to reflected cross-site scripting.
- risk 0.40cvss 6.1epss 0.00
The newsfeed (aka /index.php?page=viewnews) in BTITeam XBTIT 2.5.4 has stored XSS via the title of a news item. This is also exploitable via CSRF.
- risk 0.35cvss 5.3epss 0.01
An issue was discovered in BTITeam XBTIT. PHP error logs are stored in an open directory (/include/logs) using predictable file names, which can lead to full path disclosure and leakage of sensitive data.
- risk 0.35cvss 5.3epss 0.01
An issue was discovered in BTITeam XBTIT. By using String.replace and eval, it is possible to bypass the includes/crk_protection.php anti-XSS mechanism that looks for a number of dangerous fingerprints.