Browse CVEs

MEDIUM 5.0 CVE-2010-5086 Directory traversal vulnerability in wiki/rankings.php in Bitweaver 2.7 and 2.8.1 allows remote attackers to read arbitrary files via a .. (dot dot) … Bitweaver No fix yet Fix from $1,6002012-03-19 HIGH 7.5 CVE-2007-6650 Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image… R2 Cms No fix yet Fix from $1,9502008-01-04 MEDIUM 5.0 CVE-2007-6651 Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive information (script source code) v… Bitweaver No fix yet Fix from $1,6002008-01-04 HIGH 7.5 CVE-2006-6923 SQL injection vulnerability in newsletters/edition.php in bitweaver 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via t… Bitweaver No fix yet Fix from $1,9502007-01-13 MEDIUM 6.8 CVE-2006-6925 Multiple cross-site scripting (XSS) vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via … Bitweaver No fix yet Fix from $1,6002007-01-13 MEDIUM 5.0 CVE-2006-6924 bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sort_mode=-98 query string to (1) blogs/list_blogs.php, (2)… Bitweaver No fix yet Fix from $1,6002007-01-13 MEDIUM 5.0 CVE-2006-3104EPSS 9% users/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an invalid sort_mode parameter, which reveals the instal… Bitweaver No fix yet Fix from $1,6002006-06-21 MEDIUM 5.0 CVE-2006-3105 CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple un… Bitweaver No fix yet Fix from $1,6002006-06-21 HIGH 7.5 CVE-2005-4380 Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL commands via the (1) sort_mode… Bitweaver Mitigation only Fix from $1,9502005-12-20