365 matches found
CVE-2006-3104
CVE-2006-3104 concerns Bitweaver 1.3, where the script users/index.php exposes a sensitive information disclosure via an invalid sort_mode parameter. The error message can reveal installation path and database information, indicating a server-side information exposure vulnerability in the renderi...
CVE-2006-3104
users/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an invalid sortmode parameter, which reveals the installation path and database information in the resultant error message...
CVE-2006-3105
CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP headers, as demonstrated by the BWSESSION parameter in index.php...
CVE-2006-3105: Undefined Security Weakness
CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP headers, as demonstrated by the BWSESSION parameter in index.php...
CVE-2006-3104: Undefined Security Weakness
users/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an invalid sortmode parameter, which reveals the installation path and database information in the resultant error message...
CVE-2006-3103: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the 1 error parameter in users/login.php and the 2 feedback parameter in articles/index.php...
CVE-2006-3102: Undefined Security Weakness
Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the modmime extension, allows remote attackers to execute arbitrary PHP code by uploading arbitrary files with double extensions, which are stored for a small period of time under the webroot in the temp/articles...
bitweaver <= 1.3 (tmpImagePath) Attachment mod_mime Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "bitweaver = v1.3 'tmpImagePath' attachment modmime exploit\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "dork: "powered by bitweaver"\r\n\r\n"; if $argc4 echo...
bitweaver <= 1.3 (tmpImagePath) Attachment mod_mime Exploit
Exploit for unknown platform in category web applications =========================================================== bitweaver = 1.3 tmpImagePath Attachment modmime Exploit =========================================================== !/usr/bin/php -q -d shortopentag=on ? echo "bitweaver = v1.3...
Bitweaver 1.3 - tmpImagePath Attachment mod_mime
Bitweaver 1.3 - tmpImagePath Attachment modmime !/usr/bin/php -q -d shortopentag=on mErrors'articleimage'...
Bitweaver 1.3 - 'tmpImagePath' Attachment mod_mime
!/usr/bin/php -q -d shortopentag=on mErrors'articleimage' = "Error during attachment of article image";...
[SA19673] Bitweaver "error" Cross-Site Scripting Vulnerability
TITLE: Bitweaver "error" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19673 VERIFY ADVISORY: http://secunia.com/advisories/19673/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: bitweaver 1.x http://secunia.com/product/8545/ DESCRIPTION: KaDaL-X has...
Cross site scripting
Cross-site scripting XSS vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-1745
Cross-site scripting XSS vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-1745
Cross-site scripting XSS vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-1745
This CVE concerns Bitweaver 1.3 and an input handling flaw in login.php that allows cross-site scripting via the error parameter. The vulnerability is an XSS in a web login page component, with the root cause being improper handling/encoding of user-supplied data in the error parameter. The provi...
CVE-2006-1745: Undefined Security Weakness
Cross-site scripting XSS vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Bitweaver CMS 1.3 - Multiple Cross-Site Scripting Vulnerabilities
Bitweaver CMS 1.3 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17406/info Bitweaver CMS is prone to multiple cross-site scripting vulnerabilities. Thess issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...
Bitweaver CMS 1.3 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/17406/info Bitweaver CMS is prone to multiple cross-site scripting vulnerabilities. Thess issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed...
Cross site scripting
Cross-site scripting XSS vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the commenttitle parameter...