| Max CVSS | 5.1 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-3103 | 4.3 |
Cross-site scripting (XSS) vulnerability in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error parameter in users/login.php and the (2) feedback parameter in articles/index.php.
|
18-10-2018 - 16:45 | 21-06-2006 - 01:02 | |
| CVE-2006-3102 | 5.1 |
Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remote attackers to execute arbitrary PHP code by uploading arbitrary files with double extensions, which are stored for a small period
|
18-10-2018 - 16:45 | 21-06-2006 - 01:02 | |
| CVE-2006-3104 | 5.0 |
users/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an invalid sort_mode parameter, which reveals the installation path and database information in the resultant error message.
|
18-10-2018 - 16:45 | 21-06-2006 - 01:02 |