Advisories · Technology

Jan Syski MegaBIP.

Every CVE that names Jan Syski MegaBIP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-3895 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Low token entropy in MegaBIP
- Jan Syski MegaBIP
- CWE-334
Not analysed yet 23 May 2025
CVE-2025-3894 CVE record

CVSS 4.8 Medium

Stored XSS in MegaBIP
- Jan Syski MegaBIP
- Cross-site scripting (XSS)
Not analysed yet 23 May 2025
CVE-2025-3893 CVE record

CVSS 8.6 High

SQL Injection in MegaBIP
- Jan Syski MegaBIP
- SQL injection
Not analysed yet 23 May 2025
CVE-2024-6880 CVE record

CVSS 6.9 Medium

CSRF in MegaBIP
- Jan Syski MegaBIP
- Information disclosure
Not analysed yet 10 Jan 2025
CVE-2024-6662 CVE record

CVSS 8.7 High

CSRF in MegaBIP
- Jan Syski MegaBIP
- Cross-site request forgery (CSRF)
Not analysed yet 10 Jan 2025
CVE-2024-6527 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

SQL Injection in MegaBIP
- Jan Syski MegaBIP
- SQL injection
Not analysed yet 9 Jul 2024
CVE-2024-6160 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

SQL Injection in MegaBIP
- Jan Syski MegaBIP
- SQL injection
Not analysed yet 24 Jun 2024
CVE-2024-1659 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Arbitrary File Upload in MegaBIP
- Jan Syski MegaBIP
- Unrestricted file upload
Not analysed yet 12 Jun 2024
CVE-2024-1577 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Remote Code Execution in MegaBIP
- Jan Syski MegaBIP
- Code injection
Not analysed yet 12 Jun 2024
CVE-2024-1576 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

SQL Injection in MegaBIP
- Jan Syski MegaBIP
- SQL injection
Not analysed yet 12 Jun 2024
CVE-2023-5378 CVE record

CVSS 8.8 High

Stored XSS in SmodBIP and MegaBIP
- Jan Syski MegaBIP
- Jan Syski SmodBIP
- Cross-site scripting (XSS)
Not analysed yet 29 Jan 2024