Skip to content
OpenAdvisories

Product · Jan Syski

MegaBIP

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2025-3893

    SQL Injection in MegaBIP

    While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action. Input provided by the the user is not sanitized, leading to SQL Injection vulnerability.  Version 5.20 of MegaBIP fixes this issue.

    Jan Syski MegaBIP
  • High 8.7
    CVE-2024-6662

    CSRF in MegaBIP

    Websites managed by MegaBIP in versions below 5.15 are vulnerable to Cross-Site Request Forgery (CSRF) as the form available under "/edytor/index.php?id=7,7,0" lacks protection mechanisms. A user could be tricked into visiting a malicious website, which would…

    Jan Syski MegaBIP
  • High 8.8
    CVE-2023-5378

    Stored XSS in SmodBIP and MegaBIP

    Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range o…

    Jan Syski MegaBIP SmodBIP