Description
An issue was discovered in BTITeam XBTIT. By using String.replace and eval, it is possible to bypass the includes/crk_protection.php anti-XSS mechanism that looks for a number of dangerous fingerprints.
Unscored
CVE-2018-15676
EUVD-2018-7547GHSA-pghg-gc58-p2mh
An issue was discovered in BTITeam XBTIT. By using String.replace and eval, it is possible to bypass the includes/crk_protection.php anti-X…
Published Sep 5, 2018 · Updated Aug 5, 2024 · Assigned by mitre