Design/Logic Flaw

2018-09-0521:29:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.6%

JSON

An issue was discovered in BTITeam XBTIT. PHP error logs are stored in an open directory (/include/logs) using predictable file names, which can lead to full path disclosure and leakage of sensitive data.

CPENameOperatorVersion
xbtitle2.5.4

CPE	Name	Operator	Version
	xbtit	le	2.5.4

References

rastating.github.io/xbtit-multiple-vulnerabilities/