PT-2018-13137 · Btiteam · Xbtit

Rastating · Publicado 2018-09-05 · Atualizado 2018-11-05 · CVE-2018-15679

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions BTITeam XBTIT version 2.5.4

Description An issue was discovered in the search function available at "/index.php?page=forums&action=search", where the keywords parameter is vulnerable to reflected cross-site scripting.

Recommendations For BTITeam XBTIT version 2.5.4, consider restricting access to the search function or avoiding the use of the keywords parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-15679

Produtos afetados

Xbtit

Referências · 4

• 🔥 https://rastating.github.io/xbtit-multiple-vulnerabilities · Exploit
• https://osv.dev/vulnerability/CVE-2018-15679 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-15679 · Nota de Segurança
• ❌ https://github.com/btiteam/xbtit/pull/58 · Nota, Deleted