Skip to content
OpenAdvisories

Vendor

Jan Syski

12 known vulnerabilities.

Products

MegaBIP 11 SmodBIP 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.6
    CVE-2025-3893

    SQL Injection in MegaBIP

    While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action. Input provided by the the user is not sanitized, leading to SQL Injection vulnerability.  Version 5.20 of MegaBIP fixes this issue.

    Jan Syski MegaBIP
  • High 8.7
    CVE-2024-6662

    CSRF in MegaBIP

    Websites managed by MegaBIP in versions below 5.15 are vulnerable to Cross-Site Request Forgery (CSRF) as the form available under "/edytor/index.php?id=7,7,0" lacks protection mechanisms. A user could be tricked into visiting a malicious website, which would…

    Jan Syski MegaBIP
  • High 8.8
    CVE-2023-5378

    Stored XSS in SmodBIP and MegaBIP

    Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range o…

    Jan Syski MegaBIP SmodBIP
  • High 8.8
    CVE-2023-4837

    Cross-site request forgery (CSRF) in SmodBIP

    SmodBIP is vulnerable to Cross-Site Request Forgery, that could be used to induce logged in users to perform unintended actions, including creation of additional accounts with administrative privileges. This issue affects all versions of SmodBIP. SmodBIP is n…

    Jan Syski SmodBIP