CVE-2018-17870

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An issue was discovered in BTITeam XBTIT 2.5.4. The "returnto" parameter of account_change.php is vulnerable to an open redirect, a different vulnerability than CVE-2018-15683.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/btiteam/xbtit/pull/59Patch, Third Party Advisory
https://github.com/btiteam/xbtit/pull/59Patch, Third Party Advisory

Timeline

Published: Oct 1, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-178716.5Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Incorrect Access Control.CVE-2018-178728.8Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions.CVE-2018-178738.8An incorrect access control vulnerability in the FTP configuration of WiFiRanger devices with firmware version 7.0.8rc3 and earlier allows a CVE-2018-178746.1ExpressionEngine before 4.3.5 has reflected XSS.CVE-2018-178758.8A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands CVE-2018-178766.1A Stored XSS vulnerability has been discovered in the v5.5.0 version of the Coaster CMS product.CVE-2018-178777.5A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is predictable via an exter CVE-2018-178789.8Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted string sent to sprint CVE-2018-178799.8An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system() as root. There are CVE-2018-17884.4IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privileged user. IBM X-Force I CVE-2018-178807.5On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 RunReboot commands without authentication to trigger a reboot CVE-2018-178819.8On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger