Skip to content
OpenAdvisories

Product · Jan Syski

SmodBIP

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2023-5378

    Stored XSS in SmodBIP and MegaBIP

    Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This issue affects SmodBIP in all versions and MegaBIP in versions up to 4.36.2. MegaBIP 5.08 was tested and is not vulnerable. A precise range o…

    Jan Syski MegaBIP SmodBIP
  • High 8.8
    CVE-2023-4837

    Cross-site request forgery (CSRF) in SmodBIP

    SmodBIP is vulnerable to Cross-Site Request Forgery, that could be used to induce logged in users to perform unintended actions, including creation of additional accounts with administrative privileges. This issue affects all versions of SmodBIP. SmodBIP is n…

    Jan Syski SmodBIP