Directory traversal

Directory traversal vulnerability in gmap/viewoverlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files via "''%2F" dot dot encoded slash sequences in the overlaytype parameter...

CVE-2012-5192

Directory traversal vulnerability in gmap/viewoverlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files via "''%2F" dot dot encoded slash sequences in the overlaytype parameter...

CVE-2012-5192

Bitweaver CVE-2012-5192 is a directory traversal vulnerability affecting Bitweaver 2.8.1 and earlier in gmap/view_overlay.php via the overlay_type parameter. The input can be crafted with dot-dot encoded slash sequences (''%2F) to bypass checks and read arbitrary files outside the web root. Impac...

PT-2014-2301

Name of the Vulnerable Software and Affected Versions Bitweaver versions 2.8.1 and earlier Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability. This is achieved by using '''%2F" dot dot encoded slash sequences in the overlay type...

CVE-2012-5192

Directory traversal vulnerability in gmap/viewoverlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files via "''%2F" dot dot encoded slash sequences in the overlaytype parameter...

CVE-2012-5192: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in gmap/viewoverlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files via "''%2F" dot dot encoded slash sequences in the overlaytype parameter...

Bitweaver overlay_type Directory Traversal (CVE-2012-5192)

A directory traversal vulnerability has been reported in Bitweaver...

Bitweaver 2.8.1 LFI

Local file include vulnerability in Bitweaver overlaytype parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Bitweaver Multiple Cross Site Scripting and Local File Include Vulnerabilities

Bitweaver is prone to multiple cross-site scripting vulnerabilities and a local file include vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Bitweaver 2.8.1 Cross Site Scripting / Local File Inclusion

Trustwave SpiderLabs Security Advisory TWSL2012-016: Multiple Vulnerabilities in Bitweaver Published: 10/23/2012 Version: 1.0 Vendor: Bitweaver http://www.bitweaver.org/ Product: Bitweaver Version affected: 2.8.1 and earlier versions Product description: Bitweaver is a free and open source web...

Bitweaver 2.8.1 - Multiple Vulnerabilities

Bitweaver 2.8.1 - Multiple Vulnerabilities Trustwave SpiderLabs Security Advisory TWSL2012-016: Multiple Vulnerabilities in Bitweaver Published: 10/23/2012 Version: 1.0 Vendor: Bitweaver http://www.bitweaver.org/ Product: Bitweaver Version affected: 2.8.1 and earlier versions Product description:...

Bitweaver 2.8.1 - Multiple Vulnerabilities

Trustwave SpiderLabs Security Advisory TWSL2012-016: Multiple Vulnerabilities in Bitweaver Published: 10/23/2012 Version: 1.0 Vendor: Bitweaver http://www.bitweaver.org/ Product: Bitweaver Version affected: 2.8.1 and earlier versions Product description: Bitweaver is a free and open source web...

Bitweaver overlay_type Directory Traversal

This module exploits a directory traversal vulnerability found in Bitweaver. When handling the 'overlaytype' parameter, viewoverlay.php fails to do any path checking/filtering, which can be abused to read any file outside the virtual directory. Module Options msf use...

Bitweaver 2.8.1 Multiple Vulnerabilities

Finding 1: Local File Inclusion Vulnerability CVE: CVE-2012-5192 Finding 2: Multiple XSS Vulnerabilities in Bitweaver CVE: CVE-2012-5193 Trustwave SpiderLabs Security Advisory TWSL2012-016: Multiple Vulnerabilities in Bitweaver Published: 10/23/2012 Version: 1.0 Vendor: Bitweaver...

Bitweaver CMS 2.8.1 Cross Site Scripting

/. /\ /\ /\ /\ / / // | | \ \ \ \ / / / /// / // / / / /// / // | / / \ | | | / \ / / / / .\ / / \ / / \ / / .\ / / \ / / \ | |/ \ / / / | | |/ \ | / / / / / / / / / / / / / / | | | \ // / /||/ /| // \// / // / /\// / // / /||| / / / / / / / / / / / / / /...

Bitweaver 2.7 LFI

Local file include vulnerability in Bitweaver style parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

CVE-2010-5086

Directory traversal vulnerability in wiki/rankings.php in Bitweaver 2.7 and 2.8.1 allows remote attackers to read arbitrary files via a .. dot dot in the style parameter...

Directory traversal

Directory traversal vulnerability in wiki/rankings.php in Bitweaver 2.7 and 2.8.1 allows remote attackers to read arbitrary files via a .. dot dot in the style parameter...

CVE-2010-5086

Directory traversal vulnerability in wiki/rankings.php in Bitweaver 2.7 and 2.8.1 allows remote attackers to read arbitrary files via a .. dot dot in the style parameter...

CVE-2010-5086

CVE-2010-5086 affects Bitweaver 2.7 and 2.8.1, exposing a Local File Include in wiki/rankings.php via a .. in the style parameter, enabling remote attackers to read arbitrary files. The vulnerability is a directory traversal/LFI issue rooted in inadequate input sanitization of the style parameter...