CVE-2018-15678: Improper Neutralization of Input During Web Page Generation

An issue was discovered in BTITeam XBTIT 2.5.4. The "act" parameter in the sign-up page available at /index.php?page=signup is vulnerable to reflected cross-site scripting...

CVE-2018-15681: Incorrect Permission Assignment for Critical Resource

An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is rehashed using a predictable salt and stored in the "pass" cookie, which is not flagged as HTTPOnly. Due to the weak and predictable salt that is in place, an attacker who successfully steals this cookie c...

PT-2018-13516

Name of the Vulnerable Software and Affected Versions BTITeam XBTIT version 2.5.4 Description An issue was discovered that allows XSS via the id parameter in the "news.php" endpoint. Recommendations For BTITeam XBTIT version 2.5.4, consider restricting access to the id parameter in the "news.php"...

PT-2018-13142

Name of the Vulnerable Software and Affected Versions BTITeam XBTIT affected versions not specified Description An issue was discovered where the returnto parameter of the login page is vulnerable to an open redirect due to a lack of validation. If a user is already logged in when accessing the...

PT-2018-13134

Name of the Vulnerable Software and Affected Versions BTITeam XBTIT affected versions not specified Description An issue was discovered that allows bypassing the anti-XSS mechanism in includes/crk protection.php. This is achieved by utilizing String.replace and eval, enabling the circumvention of...

PT-2018-13141

Name of the Vulnerable Software and Affected Versions BTITeam XBTIT affected versions not specified Description An issue was discovered due to a lack of cross-site request forgery protection, making it possible to automate the action of sending private messages to users by luring an authenticated...

PT-2018-13135

Name of the Vulnerable Software and Affected Versions BTITeam XBTIT version 2.5.4 Description The issue concerns a stored XSS exploit via the title of a news item in the newsfeed, accessible through the API endpoint "/index.php?page=viewnews". This exploit is also possible through CSRF...

PT-2018-13143

Name of the Vulnerable Software and Affected Versions BTITeam XBTIT affected versions not specified Description An issue in BTITeam XBTIT allows PHP error logs to be stored in an open directory /include/logs with predictable file names. This can lead to full path disclosure and the leakage of...

PT-2018-13136

Name of the Vulnerable Software and Affected Versions BTITeam XBTIT version 2.5.4 Description An issue was discovered in the sign-up page available at /index.php?page=signup, where the act parameter is vulnerable to reflected cross-site scripting. Recommendations For version 2.5.4, consider...

CVE-2018-15679: Improper Neutralization of Input During Web Page Generation

An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php?page=forums&action=search is vulnerable to reflected cross-site scripting...

PT-2018-13137

Name of the Vulnerable Software and Affected Versions BTITeam XBTIT version 2.5.4 Description An issue was discovered in the search function available at "/index.php?page=forums&action=search", where the keywords parameter is vulnerable to reflected cross-site scripting. Recommendations For BTITe...

CVE-2018-15677: Improper Neutralization of Input During Web Page Generation

The newsfeed aka /index.php?page=viewnews in BTITeam XBTIT 2.5.4 has stored XSS via the title of a news item. This is also exploitable via CSRF...