CVE-2018-16361

An issue was discovered in BTITeam XBTIT 2.5.4. news.php allows XSS via the id parameter.

• CWE-79

• https://github.com/btiteam/xbtit/pull/58Patch, Third Party Advisory
• https://rastating.github.io/xbtit-multiple-vulnerabilities/Exploit, Patch, Third Party Advisory
• https://github.com/btiteam/xbtit/pull/58Patch, Third Party Advisory
• https://rastating.github.io/xbtit-multiple-vulnerabilities/Exploit, Patch, Third Party Advisory

Published

Sep 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16354An issue was discovered in FHCRM through 2018-02-11. There i…
• CVE-2018-16356An issue was discovered in PbootCMS. There is a SQL injectio…9.8
• CVE-2018-16357An issue was discovered in PbootCMS. There is a SQL injectio…9.8
• CVE-2018-16358A cross-site scripting (XSS) vulnerability in inc/core/class…
• CVE-2018-16359Google gVisor before 2018-08-23, within the seccomp sandbox,…
• CVE-2018-1636Stack-based buffer overflow in oninit in IBM Informix Dynami…6.7
• CVE-2018-16362An issue was discovered in the Source Integration plugin bef…6.1
• CVE-2018-16363The mndpsingh287 File Manager plugin V2.9 for WordPress has …
• CVE-2018-16364A serialization vulnerability in Zoho ManageEngine Applicati…8.1
• CVE-2018-16365An issue was discovered in idreamsoft iCMS V7.0.10. admincp.…
• CVE-2018-16366An issue was discovered in idreamsoft iCMS V7.0.10. admincp.…
• CVE-2018-16367In OnlineJudge 2.0, the sandbox has an incorrect access cont…