Read the docs

xbtitfm

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

xbtitfm records in CISA KEV

No xbtitfm vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Xbtitfm 3 records HIGH

Records

3 records

TI-2024-38409 CVE-2024-58312 · GHSA-q566-6fqg-9j2h

xbtitFM 4.1.18 Unauthenticated Path Traversal in nfogen.php

Priority HIGH 73

xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attackers to access sensitive system files by manipulating URL parameters.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01203 Published 2025-12-11 No fix listed CWE-22
TI-2024-38406 CVE-2024-58309 · GHSA-36pw-gpfg-hfxr

xbtitFM 4.1.18 Unauthenticated SQL Injection in shoutedit.php

Priority HIGH 73

xbtitFM 4.1.18 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting malicious SQL code through the msgid parameter.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00579 Published 2025-12-11 No fix listed CWE-89
TI-2024-38410 CVE-2024-58313 · GHSA-7v2x-vj66-5pgm

xbtitFM 4.1.18 Insecure File Upload in file_hosting Feature

Priority HIGH 72

xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated attackers with administrative privileges to upload and execute arbitrary PHP code through the file_hosting feature.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.0061 Published 2025-12-11 No fix listed CWE-434
Open these records in search →