EDB-1918

functional

Bitweaver 1.3 - 'tmpImagePath' Attachment mod_mime

view exploit source exploit_dbverifiedtype webappsauthor rgodpublished 2006-06-15catalog exploit_db

exploited CVEs (4)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2006-3102US	medium5.1	8.45% (95th)	Exploit	2006-06-21
Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remote attackers to execute arbitrary PHP code by uploading arbit…
CVE-2006-3103US	medium4.3	4.74% (92nd)	Exploit	2006-06-21
Cross-site scripting (XSS) vulnerability in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error parameter in users/login.php and the (2)…
CVE-2006-3104US	medium5.0	8.87% (95th)	Exploit	2006-06-21
users/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an invalid sort_mode parameter, which reveals the installation path and database inform…
CVE-2006-3105US	medium5.0	2.67% (86th)	Exploit	2006-06-21
CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are i…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.