131 matches found
CVE-2018-15682
An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection, it is possible to automate the action of sending private messages to users by luring an authenticated user to a web page that automatically submits a form on their behalf...
CVE-2018-15678: Improper Neutralization of Input During Web Page Generation
An issue was discovered in BTITeam XBTIT 2.5.4. The "act" parameter in the sign-up page available at /index.php?page=signup is vulnerable to reflected cross-site scripting...
CVE-2018-15677: Improper Neutralization of Input During Web Page Generation
The newsfeed aka /index.php?page=viewnews in BTITeam XBTIT 2.5.4 has stored XSS via the title of a news item. This is also exploitable via CSRF...
CVE-2018-15681: Incorrect Permission Assignment for Critical Resource
An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is rehashed using a predictable salt and stored in the "pass" cookie, which is not flagged as HTTPOnly. Due to the weak and predictable salt that is in place, an attacker who successfully steals this cookie c...
CVE-2018-15676: Improper Neutralization of Input During Web Page Generation
An issue was discovered in BTITeam XBTIT. By using String.replace and eval, it is possible to bypass the includes/crkprotection.php anti-XSS mechanism that looks for a number of dangerous fingerprints...
CVE-2018-15682: Cross-Site Request Forgery (CSRF)
An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection, it is possible to automate the action of sending private messages to users by luring an authenticated user to a web page that automatically submits a form on their behalf...
PT-2018-13143
Name of the Vulnerable Software and Affected Versions BTITeam XBTIT affected versions not specified Description An issue in BTITeam XBTIT allows PHP error logs to be stored in an open directory /include/logs with predictable file names. This can lead to full path disclosure and the leakage of...
PT-2018-13139
Name of the Vulnerable Software and Affected Versions BTITeam XBTIT version 2.5.4 Description An issue was discovered where the hashed passwords stored in the xbtit users table are stored as unsalted MD5 hashes. This makes it easier for attackers to obtain cleartext values via a brute-force attac...
PT-2018-13135
Name of the Vulnerable Software and Affected Versions BTITeam XBTIT version 2.5.4 Description The issue concerns a stored XSS exploit via the title of a news item in the newsfeed, accessible through the API endpoint "/index.php?page=viewnews". This exploit is also possible through CSRF...
PT-2018-13136
Name of the Vulnerable Software and Affected Versions BTITeam XBTIT version 2.5.4 Description An issue was discovered in the sign-up page available at /index.php?page=signup, where the act parameter is vulnerable to reflected cross-site scripting. Recommendations For version 2.5.4, consider...
PT-2018-13137
Name of the Vulnerable Software and Affected Versions BTITeam XBTIT version 2.5.4 Description An issue was discovered in the search function available at "/index.php?page=forums&action=search", where the keywords parameter is vulnerable to reflected cross-site scripting. Recommendations For BTITe...
PT-2018-13142
Name of the Vulnerable Software and Affected Versions BTITeam XBTIT affected versions not specified Description An issue was discovered where the returnto parameter of the login page is vulnerable to an open redirect due to a lack of validation. If a user is already logged in when accessing the...
PT-2018-13134
Name of the Vulnerable Software and Affected Versions BTITeam XBTIT affected versions not specified Description An issue was discovered that allows bypassing the anti-XSS mechanism in includes/crk protection.php. This is achieved by utilizing String.replace and eval, enabling the circumvention of...
PT-2018-13141
Name of the Vulnerable Software and Affected Versions BTITeam XBTIT affected versions not specified Description An issue was discovered due to a lack of cross-site request forgery protection, making it possible to automate the action of sending private messages to users by luring an authenticated...
PT-2018-13516
Name of the Vulnerable Software and Affected Versions BTITeam XBTIT version 2.5.4 Description An issue was discovered that allows XSS via the id parameter in the "news.php" endpoint. Recommendations For BTITeam XBTIT version 2.5.4, consider restricting access to the id parameter in the "news.php"...
PT-2018-13140
Name of the Vulnerable Software and Affected Versions BTITeam XBTIT version 2.5.4 Description An issue was discovered where the password hash of a user is rehashed using a predictable salt and stored in the pass cookie, which is not flagged as HTTPOnly. This allows an attacker who steals the cook...
CVE-2018-15684: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in BTITeam XBTIT. PHP error logs are stored in an open directory /include/logs using predictable file names, which can lead to full path disclosure and leakage of sensitive data...
CVE-2018-15679: Improper Neutralization of Input During Web Page Generation
An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php?page=forums&action=search is vulnerable to reflected cross-site scripting...
CVE-2018-15680: Use of Password Hash With Insufficient Computational Effort
An issue was discovered in BTITeam XBTIT 2.5.4. The hashed passwords stored in the xbtitusers table are stored as unsalted MD5 hashes, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack...