CVE-2018-15676

PoC —

CVSS 3.0

5.3 medium

EPSS

<1%p59

Published

Sep 5, 2018 (Sep 5, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered in BTITeam XBTIT. By using String.replace and eval, it is possible to bypass the includes/crk_protection.php anti-XSS mechanism that looks for a number of dangerous fingerprints.

Vendors: btiteam
Products: xbtit
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.