btiteam records
14 published records for vendor btiteam.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')2
- CWE-916 Use of Password Hash With Insufficient Computational Effort1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-352 Cross-Site Request Forgery (CSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAll records
14 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2018-15680No exploit | An issue was discovered in BTITeam XBTIT 2.5.4.btiteam · xbtit · CWE-916 | Critical9.8 | — | 0.7% | Sep 5, 2018 |
39Monitor | CVE-2018-15681No exploit | An issue was discovered in BTITeam XBTIT 2.5.4.btiteam · xbtit · CWE-732 | Critical9.8 | — | 0.7% | Sep 5, 2018 |
36Monitor | CVE-2021-45821No exploit | A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat/getHistoryChatData.php file that is accessible by btiteam · xbtit · CWE-89 | High8.8 | — | 2.6% | Mar 16, 2022 |
35Monitor | CVE-2018-15682No exploit | An issue was discovered in BTITeam XBTIT.btiteam · xbtit · CWE-352 | High8.8 | — | 0.5% | Sep 5, 2018 |
30Monitor | CVE-2007-5986No exploit | SQL injection vulnerability in include/functions.php in BtiTracker before 1.4.5 allows remote attackers to execute arbitrary SQL commands vibtiteam · btitracker · CWE-89 | High7.5 | — | 1.0% | Nov 14, 2007 |
24Monitor | CVE-2021-45822No exploit | A cross-site scripting vulnerability is present in Xbtit 3.1.btiteam · xbtit · CWE-79 | Medium6.1 | — | 1.0% | Mar 16, 2022 |
24Monitor | CVE-2018-15678No exploit | An issue was discovered in BTITeam XBTIT 2.5.4.btiteam · xbtit · CWE-79 | Medium6.1 | — | 0.9% | Sep 5, 2018 |
24Monitor | CVE-2018-15679No exploit | An issue was discovered in BTITeam XBTIT 2.5.4.btiteam · xbtit · CWE-79 | Medium6.1 | — | 0.9% | Sep 5, 2018 |
24Monitor | CVE-2018-16361No exploit | An issue was discovered in BTITeam XBTIT 2.5.4.btiteam · xbtit · CWE-79 | Medium6.1 | — | 0.9% | Sep 5, 2018 |
24Monitor | CVE-2018-17870No exploit | An issue was discovered in BTITeam XBTIT 2.5.4.btiteam · xbtit · CWE-601 | Medium6.1 | — | 0.8% | Oct 1, 2018 |
24Monitor | CVE-2018-15683No exploit | An issue was discovered in BTITeam XBTIT.btiteam · xbtit · CWE-601 | Medium6.1 | — | 0.6% | Sep 5, 2018 |
24Monitor | CVE-2018-15677No exploit | The newsfeed (aka /index.php?page=viewnews) in BTITeam XBTIT 2.5.4 has stored XSS via the title of a news item.btiteam · xbtit · CWE-79 | Medium6.1 | — | 0.4% | Sep 5, 2018 |
21Monitor | CVE-2018-15684No exploit | An issue was discovered in BTITeam XBTIT.btiteam · xbtit · CWE-200 | Medium5.3 | — | 0.9% | Sep 5, 2018 |
21Monitor | CVE-2018-15676No exploit | An issue was discovered in BTITeam XBTIT.btiteam · xbtit · CWE-79 | Medium5.3 | — | 0.9% | Sep 5, 2018 |
- CVE-2018-1568039Monitor
An issue was discovered in BTITeam XBTIT 2.5.4.
CriticalCVSS 9.8No exploitEPSS 0%btiteam · xbtitSep 5, 2018
- CVE-2018-1568139Monitor
An issue was discovered in BTITeam XBTIT 2.5.4.
CriticalCVSS 9.8No exploitEPSS 0%btiteam · xbtitSep 5, 2018
- CVE-2021-4582136Monitor
A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat/getHistoryChatData.php file that is accessible by
HighCVSS 8.8No exploitEPSS 2%btiteam · xbtitMar 16, 2022
- CVE-2018-1568235Monitor
An issue was discovered in BTITeam XBTIT.
HighCVSS 8.8No exploitEPSS 0%btiteam · xbtitSep 5, 2018
- CVE-2007-598630Monitor
SQL injection vulnerability in include/functions.php in BtiTracker before 1.4.5 allows remote attackers to execute arbitrary SQL commands vi
HighCVSS 7.5No exploitEPSS 1%btiteam · btitrackerNov 14, 2007
- CVE-2021-4582224Monitor
A cross-site scripting vulnerability is present in Xbtit 3.1.
MediumCVSS 6.1No exploitEPSS 1%btiteam · xbtitMar 16, 2022
- CVE-2018-1567824Monitor
An issue was discovered in BTITeam XBTIT 2.5.4.
MediumCVSS 6.1No exploitEPSS 0%btiteam · xbtitSep 5, 2018
- CVE-2018-1567924Monitor
An issue was discovered in BTITeam XBTIT 2.5.4.
MediumCVSS 6.1No exploitEPSS 0%btiteam · xbtitSep 5, 2018
- CVE-2018-1636124Monitor
An issue was discovered in BTITeam XBTIT 2.5.4.
MediumCVSS 6.1No exploitEPSS 0%btiteam · xbtitSep 5, 2018
- CVE-2018-1787024Monitor
An issue was discovered in BTITeam XBTIT 2.5.4.
MediumCVSS 6.1No exploitEPSS 0%btiteam · xbtitOct 1, 2018
- CVE-2018-1568324Monitor
An issue was discovered in BTITeam XBTIT.
MediumCVSS 6.1No exploitEPSS 0%btiteam · xbtitSep 5, 2018
- CVE-2018-1567724Monitor
The newsfeed (aka /index.php?page=viewnews) in BTITeam XBTIT 2.5.4 has stored XSS via the title of a news item.
MediumCVSS 6.1No exploitEPSS 0%btiteam · xbtitSep 5, 2018
- CVE-2018-1568421Monitor
An issue was discovered in BTITeam XBTIT.
MediumCVSS 5.3No exploitEPSS 0%btiteam · xbtitSep 5, 2018
- CVE-2018-1567621Monitor
An issue was discovered in BTITeam XBTIT.
MediumCVSS 5.3No exploitEPSS 0%btiteam · xbtitSep 5, 2018