CVE-2018-15684 An issue was discovered in BTITeam XBTIT. PHP error logs are stored in an open directory (/include/logs) using predictable file names, which can lead to full path disclosure and leakage of sensitive d...
MediumCVSS 5.3
EPSS 0.96%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in BTITeam XBTIT. PHP error logs are stored in an open directory (/include/logs) using predictable file names, which can lead to full path disclosure and leakage of sensitive data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| btiteam xbtit | <= 2.5.4 | No fix listed |
References
- rastating.github.io exploit mitigation third-party-advisory