CVE-2005-4380

Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL commands via the 1 sortmode parameter to a fisheye/listgalleries.php, b messages/messagebox.php, and c users/my.php; the 2 postid parameter to d blogs/viewpost.php; and the 3...

CVE-2005-4380

Bitweaver 1.1 and 1.1.1 beta contain multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via unsafely handled input in sort_mode (fisheye/list_galleries.php, messages/message_box.php, users/my.php), post_id (blogs/view_post.php), and blog_id (blogs/v...

CVE-2005-4379

Bitweaver 1.1 and 1.1.1 beta are affected by multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary web script or HTML via specific parameters: (1) sort_mode in fisheye/list_galleries.php, messages/message_box.php, and users/my.php; (2) post_id ...

CVE-2005-4379

Multiple cross-site scripting XSS vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to inject arbitrary web script or HTML via the 1 sortmode parameter to a fisheye/listgalleries.php, b messages/messagebox.php, and c users/my.php; the 2 postid parameter to d blogs/viewpost.ph...

Bitweaver 1.1.1 - 'view.php?blog_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

Bitweaver 1.1.1 - 'message_box.php?sort_mode' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

Bitweaver 1.1.1 Beta - list_galleries.php?sort_mode Cross-Site Scripting

Bitweaver 1.1.1 Beta - listgalleries.php?sortmode Cross-Site Scripting source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

Bitweaver 1.1.1 - 'view_post.php?post_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

Bitweaver 1.1.1 Beta - 'list_galleries.php?sort_mode' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

Bitweaver 1.1.1 - view.php?blog_id Cross-Site Scripting

Bitweaver 1.1.1 - view.php?blogid Cross-Site Scripting source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of...

Bitweaver 1.1.1 - message_box.php?sort_mode Cross-Site Scripting

Bitweaver 1.1.1 - messagebox.php?sortmode Cross-Site Scripting source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitati...

Bitweaver 1.1.1 - 'my.php?sort_mode' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

bitweaver multiple vuln.

bitweaver multiple vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/bitweaver-multiple-vuln.html vendor:bitweaver.org affected version: 1.1 and 1.1.1 beta and prior Product Description: bitweaver is a rename of the TikiPro software, and is a...