BTITeam XBTIT 3.1
Approved changes feed: RSS · Atom
cpe:2.3:a:btiteam:xbtit:3.1:*:*:*:*:*:*:*
part: a version: 3.1 update: *
| Vendor | Btiteam (c4dedd63-cb97-5655-8296-97d20c1ee594) |
|---|---|
| Product | Xbtit (e4867079-6d40-500a-90c9-6091000ab2e1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/btiteam/xbtit-3.1 |
purl2cpe | 2026-06-01 10:14:47.575728 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-45822 |
vulnerable | 2026-06-08 05:36:49.469309 |
Details available
A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/sendChatData.php does not properly validate the value of the "n" (POST) parameter. Through this vulnerability, an attacker is capable to execute malicious JavaScript code.
Published: 2022-03-16T15:26:46.000Z
Updated: 2024-08-04T04:54:30.874Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45821 |
vulnerable | 2026-06-08 05:36:49.468887 |
Details available
A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat/getHistoryChatData.php file that is accessible by a registered user. As a result, a malicious user can extract sensitive data such as usernames and passwords and in some cases use this vulnerability in order to get a remote code execution on the remote web server.
Published: 2022-03-16T15:01:28.000Z
Updated: 2024-08-04T04:54:31.136Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.