Skip to content
OpenAdvisories

Product · Jan Syski

MegaBIP

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2025-3894

    Stored XSS in MegaBIP

    Text editor embedded into MegaBIP software does not neutralize user input allowing Stored XSS attacks on other users. In order to use the editor high privileges are required.   Version 5.20 of MegaBIP fixes this issue.

    Jan Syski MegaBIP
  • Medium 6.9
    CVE-2024-6880

    CSRF in MegaBIP

    During MegaBIP installation process, a user is encouraged to change a default path to administrative portal, as keeping it secret is listed by the author as one of the protection mechanisms.  Publicly available source code of "/registered.php" discloses that …

    Jan Syski MegaBIP