CVE-2018-15682 | BDVDB-2026-106529 Detail

Description#

An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection, it is possible to automate the action of sending private messages to users by luring an authenticated user to a web page that automatically submits a form on their behalf.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://rastating.github.io/xbtit-multiple-vulnerabilities/

Exploit#

No public exploit known

History#

Version 12018-09-05Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.