Approved changes feed: RSS · Atom
cpe:2.3:a:btiteam:xbtit:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Btiteam (c4dedd63-cb97-5655-8296-97d20c1ee594) |
|---|---|
| Product | Xbtit (e4867079-6d40-500a-90c9-6091000ab2e1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/btiteam/xbtit-3.1 |
purl2cpe | 2026-06-01 10:14:47.575725 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-15684 |
vulnerable | 2026-06-08 05:10:55.254942 |
Details available
An issue was discovered in BTITeam XBTIT. PHP error logs are stored in an open directory (/include/logs) using predictable file names, which can lead to full path disclosure and leakage of sensitive data.
Published: 2018-09-05T21:00:00.000Z
Updated: 2024-08-05T10:01:54.389Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15683 |
vulnerable | 2026-06-08 05:10:55.254669 |
Details available
An issue was discovered in BTITeam XBTIT. The "returnto" parameter of the login page is vulnerable to an open redirect due to a lack of validation. If a user is already logged in when accessing the page, they will be instantly redirected.
Published: 2018-09-05T21:00:00.000Z
Updated: 2024-08-05T10:01:54.434Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15682 |
vulnerable | 2026-06-08 05:10:55.254397 |
Details available
An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection, it is possible to automate the action of sending private messages to users by luring an authenticated user to a web page that automatically submits a form on their behalf.
Published: 2018-09-05T21:00:00.000Z
Updated: 2024-08-05T10:01:54.338Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15676 |
vulnerable | 2026-06-08 05:10:55.251198 |
Details available
An issue was discovered in BTITeam XBTIT. By using String.replace and eval, it is possible to bypass the includes/crk_protection.php anti-XSS mechanism that looks for a number of dangerous fingerprints.
Published: 2018-09-05T21:00:00.000Z
Updated: 2024-08-05T10:01:54.342Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.