Bitweaver 2.8.1 - Multiple Vulnerabilities

Trustwave SpiderLabs Security Advisory TWSL2012-016: Multiple Vulnerabilities in Bitweaver Published: 10/23/2012 Version: 1.0 Vendor: Bitweaver http://www.bitweaver.org/ Product: Bitweaver Version affected: 2.8.1 and earlier versions Product description: Bitweaver is a free and open source web...

Bitweaver 2.8.1 Multiple Vulnerabilities

Finding 1: Local File Inclusion Vulnerability CVE: CVE-2012-5192 Finding 2: Multiple XSS Vulnerabilities in Bitweaver CVE: CVE-2012-5193 Trustwave SpiderLabs Security Advisory TWSL2012-016: Multiple Vulnerabilities in Bitweaver Published: 10/23/2012 Version: 1.0 Vendor: Bitweaver...

CVE-2011-5193

The CVE-2011-5193 entry concerns the WordPress plugin “Whois Search” (plugin path: vendors/samswhois/samswhois.inc.php). The vulnerability is an XSS in the index.php domain parameter when the WHOIS widget is enabled, exploitable in plugin versions around 1.4.2.3 (per CVE-2011-5193). Connected dat...

CVE-2010-5193

CVE-2010-5193 : A stack-based buffer overflow exists in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) used by Viscom Image Viewer CP Pro 8.0 and Gold 6.0. The vulnerability occurs in TIFMergeMultiFiles and allows remote code execution via a long strDelimit parameter. It is a netw...

CVE-2011-5193

creationtimestamp| type| source ---|---|--- 2012-01-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36488...

SuSE 11.1 Security Update : Gimp (SAT Patch Number 5193)

Specially crafted gif files could have caused an infinite loop or a heap-based buffer overflow in the gif decoder CVE-2011-2896. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

Viscom Image Viewer CP Pro 8.0/Gold 6.0 ActiveX Control

This module exploits a stack based buffer overflow in the Active control file ImageViewer2.OCX by passing an overly long argument to an insecure TifMergeMultiFiles method. Exploitation results in code execution with the privileges of the user who browsed to the exploit page. The victim will first...

CVE-2010-5193

creationtimestamp| type| source ---|---|--- 2010-12-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15668 2011-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18123 2018-05-29 15:50:33+00:00| seen|...

Google Chrome < 3.0.195.24 RCE

Binary data 5193.pasl...

CVE-2008-5193

CVE-2008-5193 describes a Cross-site scripting (XSS) vulnerability in W1L3D4 Philboard, specifically in the file search.asp for versions 1.14 and 1.2. The underlying issue allows an attacker to inject arbitrary web script or HTML via the searchterms parameter. The related CVE notes a potential ov...

CVE-2007-5193

Twiki 4.1.2 on Debian GNU/Linux (and possibly other OS) has a default configuration that places the work area directory (cfg{RCS}{WorkAreaDir}) under the web document root. This may allow remote attackers to obtain sensitive information if .htaccess restrictions are not applied. Public details co...

CVE-2006-5193

The CVE-2006-5193 entry concerns a PHP remote file inclusion in WikyBlog (Josh Schmidt) 1.2.3 and earlier, exploitable via a URL in the includeDir parameter to execute PHP code on the server. This is described in vendor/problem records and NVD references. The provided documents do not include spe...