313 matches found
bitweaver <= 1.3 (tmpImagePath) Attachment mod_mime Exploit
Exploit for unknown platform in category web applications =========================================================== bitweaver = 1.3 tmpImagePath Attachment modmime Exploit =========================================================== !/usr/bin/php -q -d shortopentag=on ? echo "bitweaver = v1.3...
Bitweaver 1.3 - tmpImagePath Attachment mod_mime
Bitweaver 1.3 - tmpImagePath Attachment modmime !/usr/bin/php -q -d shortopentag=on mErrors'articleimage'...
Bitweaver 1.3 - 'tmpImagePath' Attachment mod_mime
!/usr/bin/php -q -d shortopentag=on mErrors'articleimage' = "Error during attachment of article image";...
[SA19673] Bitweaver "error" Cross-Site Scripting Vulnerability
TITLE: Bitweaver "error" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19673 VERIFY ADVISORY: http://secunia.com/advisories/19673/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: bitweaver 1.x http://secunia.com/product/8545/ DESCRIPTION: KaDaL-X has...
CVE-2006-1745
Cross-site scripting XSS vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-1745
This CVE concerns Bitweaver 1.3 and an input handling flaw in login.php that allows cross-site scripting via the error parameter. The vulnerability is an XSS in a web login page component, with the root cause being improper handling/encoding of user-supplied data in the error parameter. The provi...
CVE-2006-1745
Cross-site scripting XSS vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Bitweaver CMS 1.3 - Multiple Cross-Site Scripting Vulnerabilities
Bitweaver CMS 1.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17406/info Bitweaver CMS is prone to multiple cross-site scripting vulnerabilities. Thess issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...
Bitweaver CMS 1.3 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/17406/info Bitweaver CMS is prone to multiple cross-site scripting vulnerabilities. Thess issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed...
Cross site scripting
Cross-site scripting XSS vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the commenttitle parameter...
CVE-2006-1131
Cross-site scripting XSS vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the commenttitle parameter...
CVE-2006-1131
Cross-site scripting XSS vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the commenttitle parameter...
CVE-2006-1131
The CVE refers to a Cross-site Scripting (XSS) vulnerability in bitweaver CMS 1.2.1, specifically in read.php where the comment_title parameter is not properly sanitized, allowing injection of arbitrary web script or HTML. Documented impact is partial integrity impact with no confidentiality or a...
bitweaver_1.2.1_XSS.txt
Bitweaver CMS 1.2.1 User Comment Title Cross-Site Scripting Vulnerability Information of Software: Software: Bitweaver CMS 1.2.1 Site: http://www.bitweaver.org Description of software: bitweaver is continually improving it's stability, usability, flexibility and power. The rate at which this is...
[SA19101] bitweaver "title" Script Insertion Vulnerability
TITLE: bitweaver "title" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA19101 VERIFY ADVISORY: http://secunia.com/advisories/19101/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: bitweaver 1.x http://secunia.com/product/8545/ DESCRIPTION: Kiki has...
Bitweaver 1.1/1.2 - 'Title' HTML Injection
source: https://www.securityfocus.com/bid/16973/info The bitweaver application is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in...
Bitweaver 1.11.2 - Title HTML Injection
Bitweaver 1.11.2 - Title HTML Injection source: https://www.securityfocus.com/bid/16973/info The bitweaver application is prone to an HTML-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HT...
CVE-2005-4379
Multiple cross-site scripting XSS vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to inject arbitrary web script or HTML via the 1 sortmode parameter to a fisheye/listgalleries.php, b messages/messagebox.php, and c users/my.php; the 2 postid parameter to d blogs/viewpost.ph...
CVE-2005-4380
Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL commands via the 1 sortmode parameter to a fisheye/listgalleries.php, b messages/messagebox.php, and c users/my.php; the 2 postid parameter to d blogs/viewpost.php; and the 3...