Priority LOW 29
A cross-site scripting vulnerability is present in Xbtit 3.1.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01055 · Published 2022-03-16 · No fix listed CWE-79
Priority MEDIUM 43
A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat/getHistoryChatData.php file that is accessible by a registered user.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02675 · Published 2022-03-16 · No fix listed CWE-89
Priority LOW 29
An issue was discovered in BTITeam XBTIT 2.5.4.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00803 · Published 2018-10-01 · No fix listed CWE-601
Priority LOW 29
An issue was discovered in BTITeam XBTIT 2.5.4.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00947 · Published 2018-09-05 · No fix listed CWE-79
Priority LOW 26
An issue was discovered in BTITeam XBTIT.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00961 · Published 2018-09-05 · No fix listed CWE-200
Priority LOW 28
An issue was discovered in BTITeam XBTIT.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00699 · Published 2018-09-05 · No fix listed CWE-601
Priority LOW 39
An issue was discovered in BTITeam XBTIT.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00538 · Published 2018-09-05 · No fix listed CWE-352
Priority MEDIUM 43
An issue was discovered in BTITeam XBTIT 2.5.4.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00751 · Published 2018-09-05 · No fix listed CWE-732
Priority MEDIUM 43
An issue was discovered in BTITeam XBTIT 2.5.4.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00792 · Published 2018-09-05 · No fix listed CWE-916
Priority LOW 29
An issue was discovered in BTITeam XBTIT 2.5.4.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00947 · Published 2018-09-05 · No fix listed CWE-79
Priority LOW 29
An issue was discovered in BTITeam XBTIT 2.5.4.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00947 · Published 2018-09-05 · No fix listed CWE-79
Priority LOW 28
The newsfeed (aka /index.php?page=viewnews) in BTITeam XBTIT 2.5.4 has stored XSS via the title of a news item.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00474 · Published 2018-09-05 · No fix listed CWE-352
Priority LOW 26
An issue was discovered in BTITeam XBTIT.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00932 · Published 2018-09-05 · No fix listed CWE-79
Priority LOW 35
SQL injection vulnerability in include/functions.php in BtiTracker before 1.4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01096 · Published 2007-11-15 · No fix listed CWE-89