Open redirect

An issue was discovered in BTITeam XBTIT. The "returnto" parameter of the login page is vulnerable to an open redirect due to a lack of validation. If a user is already logged in when accessing the page, they will be instantly redirected...

Design/Logic Flaw

An issue was discovered in BTITeam XBTIT 2.5.4. The hashed passwords stored in the xbtitusers table are stored as unsalted MD5 hashes, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack...

Cross site scripting

An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php?page=forums&action=search is vulnerable to reflected cross-site scripting...

Cross site request forgery (csrf)

An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection, it is possible to automate the action of sending private messages to users by luring an authenticated user to a web page that automatically submits a form on their behalf...

CVE-2018-15676

BTITeam XBTIT has a cross-site scripting vulnerability (CVE-2018-15676). The root cause is the use of String.replace and eval, which bypasses the anti-XSS mechanism in includes/crk_protection.php and allows injection/execution of arbitrary JavaScript. The reports describe the vulnerability and ex...

CVE-2018-15684

An issue was discovered in BTITeam XBTIT. PHP error logs are stored in an open directory /include/logs using predictable file names, which can lead to full path disclosure and leakage of sensitive data...

CVE-2018-15684

CVE-2018-15684 concerns BTITeam XBTIT where PHP error logs are stored in an open directory (/include/logs) with predictable filenames, enabling full path disclosure and leakage of sensitive data. The vulnerability is described across multiple sources (NVD/NVD-variants) indicating exposure of log ...

CVE-2018-15682

BTITeam XBTIT is affected by a cross-site request forgery (CSRF) vulnerability due to missing CSRF protection. An attacker could trick an authenticated user into visiting a page that auto-submits a form to send private messages on behalf of the user. Root cause: CSRF protection absence in the app...

CVE-2018-15679

CVE-2018-15679 affects BTITeam XBTIT 2.5.4. A reflective XSS flaw exists in the keywords parameter of the search function at /index.php?page=forums&action=search, caused by insufficient input sanitization. The vulnerability can allow arbitrary JavaScript execution in a user’s browser. Public fixe...

CVE-2018-16361

BTITeam XBTIT 2.5.4 is affected in news.php where the id parameter enables cross-site scripting (XSS). The root cause is likely inadequate input handling in news.php, allowing injected script to be executed by victims. No remediation details are provided in the connected documents; therefore, a p...

CVE-2018-15679

An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php?page=forums&action=search is vulnerable to reflected cross-site scripting...

CVE-2018-15677

The newsfeed aka /index.php?page=viewnews in BTITeam XBTIT 2.5.4 has stored XSS via the title of a news item. This is also exploitable via CSRF...

CVE-2018-15683

CVE-2018-15683 describes an open redirect vulnerability in BTITeam XBTIT. The issue occurs on the login page where the returnto parameter is not validated, causing an immediate redirect if a user is already authenticated. The connected documents corroborate a related open redirect vulnerability i...

CVE-2018-15678

BTITeam XBTIT 2.5.4 contains a reflected cross-site scripting (XSS) vulnerability in the sign-up page ( /index.php?page=signup ) via the act parameter. The NVD entry CVE-2018-15678 documents this issue with CVSS v2 base score 4.3 ( MEDIUM ) and CVSS v3 base score 6.1 ( MEDIUM ), indicating networ...

CVE-2018-15680

CVE-2018-15680 affects BTITeam XBTIT 2.5.4 where passwords in the xbtit_users table are stored as unsalted MD5 hashes. The root cause is weak password hashing, enabling context-dependent attackers to brute-force and recover cleartext passwords. Public details in the provided documents confirm the...

CVE-2018-15681

An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is rehashed using a predictable salt and stored in the "pass" cookie, which is not flagged as HTTPOnly. Due to the weak and predictable salt that is in place, an attacker who successfully steals this cookie c...

CVE-2018-15677

BTITeam XBTIT 2.5.4 contains a stored cross-site scripting (XSS) vulnerability in the newsfeed page (/index.php?page=viewnews) where the news item title is not correctly sanitized. The issue can be triggered via standard XSS and is also exploitable through CSRF. The root cause is the failure to p...

CVE-2018-15678

An issue was discovered in BTITeam XBTIT 2.5.4. The "act" parameter in the sign-up page available at /index.php?page=signup is vulnerable to reflected cross-site scripting...

CVE-2018-15683

An issue was discovered in BTITeam XBTIT. The "returnto" parameter of the login page is vulnerable to an open redirect due to a lack of validation. If a user is already logged in when accessing the page, they will be instantly redirected...

CVE-2018-15682

An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection, it is possible to automate the action of sending private messages to users by luring an authenticated user to a web page that automatically submits a form on their behalf...