365 matches found
CVE-2010-5086: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in wiki/rankings.php in Bitweaver 2.7 and 2.8.1 allows remote attackers to read arbitrary files via a .. dot dot in the style parameter...
PT-2012-1329
Name of the Vulnerable Software and Affected Versions Bitweaver versions 2.7 through 2.8.1 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the style parameter of the wiki/rankings.php file. Recommendation...
Bitweaver 'rankings.php' Local File Include Vulnerability
Bitweaver is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Bitweaver v2.81 Local File Inclusion Vulnerability
Exploit for php platform in category web applications Exploit Title: Bitweaver v2.81 LFI exploit Date: 27.02.2012 Author: I2sec-PJH Software Link: http://sourceforge.net/projects/bitweaver/files/bitweaver2.x/bitweaver2.8.1.zip/download Version: v2.81 Tested on: windows xp...
Bitweaver 2.81 Local File Inclusion
Exploit Title: Bitweaver v2.81 LFI exploit Date: 27.02.2012 Author: I2sec-PJH Software Link: http://sourceforge.net/projects/bitweaver/files/bitweaver2.x/bitweaver2.8.1.zip/download Version: v2.81 Tested on: windows xp ------------------------------------------------------ -Description LFI...
Bitweaver Multiple Cross-Site Scripting Vulnerabilities
Bitweaver is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...
Bitweaver 2.8.1 Multiple Cross-site Scripting Vulnerabilities
Advisory: Bitweaver 2.8.1 Multiple Cross-site Scripting Vulnerabilities Advisory ID: SSCHADV2011-021 Author: Stefan Schurtz Affected Software: Successfully tested on Bitweaver 2.8.1 Vendor URL: http://www.bitweaver.org Vendor Status: informed CVE-ID: - ========================== Vulnerability...
Bitweaver 2.8.1 Cross Site Scripting
Advisory: Bitweaver 2.8.1 Multiple Cross-site Scripting Vulnerabilities Advisory ID: SSCHADV2011-021 Author: Stefan Schurtz Affected Software: Successfully tested on Bitweaver 2.8.1 Vendor URL: http://www.bitweaver.org Vendor Status: informed CVE-ID: - ========================== Vulnerability...
Bitweaver 2.8.1 - Multiple Cross-Site Scripting Vulnerabilities
Bitweaver 2.8.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49864/info Bitweaver is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
Bitweaver 2.8.1 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/49864/info Bitweaver is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
BitWeaver Framework v2.8.1 - Multiple Web Vulnerabilities
Document Title: =============== BitWeaver Framework v2.8.1 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-31 Vulnerability Laboratory ID VL-ID: ==================================== 71 Product & Service Introduction: =============================== bitweaver is an application...
BitWeaver Framework v2.8.1 - Multiple Web Vulnerabilities
Document Title: =============== BitWeaver Framework v2.8.1 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-31 Vulnerability Laboratory ID VL-ID: ==================================== 71 Product & Service Introduction: =============================== bitweaver is an application...
Bitweaver 2.x (FCKeditor) File Upload Code Execution
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
Bitweaver 2.x (FCKeditor) File Upload Code Execution (meta)
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Bitweaver 2.5.0 (list_blogs.php) Cookie Stealing/LFI Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Bitweaver 2.x (FCKeditor) Multiple Arbitrary Shell Upload
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Bitweaver 2.8.1 Cross Site Scripting / SQL Injection
exploit title: Path Disclosure bitweaver 2.8 date: 25.o2.2o11 author: lemlajt software : bitweaver version: 2.8 tested on: linux cve : Path Disclosure bitweaver 2.8 PoC : http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/kernel/admin/index.php?page=%27 sql injection in bitweaver 2.8 PoC : 1...
Bitweaver 2.8.0 - Multiple Vulnerabilities
Bitweaver 2.8.0 - Multiple Vulnerabilities exploit title: Path Disclosure bitweaver 2.8 date: 25.o2.2o11 author: lemlajt software : bitweaver version: 2.8 tested on: linux cve : Path Disclosure bitweaver 2.8 PoC :...
Bitweaver 2.8.0 - Multiple Vulnerabilities
exploit title: Path Disclosure bitweaver 2.8 date: 25.o2.2o11 author: lemlajt software : bitweaver version: 2.8 tested on: linux cve : Path Disclosure bitweaver 2.8 PoC : http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/kernel/admin/index.php?page=%27 sql injection in bitweaver 2.8 PoC : 1...
Bitweaver <= 2.8.1 'edit.php' HTML Injection Vulnerability
Bitweaver is prone to an HTML injection vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...