Skip to content
Btiteam Xbtit vulnerabilities
-
btiteam xbtit
A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs...
CVE-2021-45822
6.1 Medium
-
btiteam xbtit
A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat...
CVE-2021-45821
8.8 High
-
btiteam xbtit
An issue was discovered in BTITeam XBTIT 2.5.4. The "returnto" parameter of account_change.php is...
CVE-2018-17870
6.1 Medium
-
btiteam xbtit
An issue was discovered in BTITeam XBTIT 2.5.4. news.php allows XSS via the id parameter.
CVE-2018-16361
6.1 Medium
-
btiteam xbtit
An issue was discovered in BTITeam XBTIT. PHP error logs are stored in an open directory (...
CVE-2018-15684
5.3 Medium
-
btiteam xbtit
An issue was discovered in BTITeam XBTIT. The "returnto" parameter of the login page is...
CVE-2018-15683
6.1 Medium
-
btiteam xbtit
An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection,...
CVE-2018-15682
8.8 High
-
btiteam xbtit
An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is...
CVE-2018-15681
9.8 Critical
-
btiteam xbtit
An issue was discovered in BTITeam XBTIT 2.5.4. The hashed passwords stored in the xbtit_users...
CVE-2018-15680
9.8 Critical
-
btiteam xbtit
An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function...
CVE-2018-15679
6.1 Medium
-
btiteam xbtit
An issue was discovered in BTITeam XBTIT 2.5.4. The "act" parameter in the sign-up page available...
CVE-2018-15678
6.1 Medium
-
btiteam xbtit
The newsfeed (aka /index.php?page=viewnews) in BTITeam XBTIT 2.5.4 has stored XSS via the title...
CVE-2018-15677
6.1 Medium
-
btiteam xbtit
An issue was discovered in BTITeam XBTIT. By using String.replace and eval, it is possible to...
CVE-2018-15676
5.3 Medium