Published: 20/12/2005 Updated: 20/07/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 775

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote malicious users to execute arbitrary SQL commands via the (1) sort_mode parameter to (a) fisheye/list_galleries.php, (b) messages/message_box.php, and (c) users/my.php; the (2) post_id parameter to (d) blogs/view_post.php; and the (3) blog_id parameter to (e) blogs/view.php, which are not properly cleansed by the convert_sortmode function in kernel/BitDb.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
bitweaver bitweaver 1.1
bitweaver bitweaver 1.1.1_beta

source: wwwsecurityfocuscom/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, th ...

source: wwwsecurityfocuscom/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data ...

source: wwwsecurityfocuscom/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, ...

source: wwwsecurityfocuscom/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of ...

source: wwwsecurityfocuscom/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of da ...

CWE-89 http://www.securityfocus.com/bid/15962 http://www.bitweaver.org/forums/viewtopic.php?t=1299 http://www.osvdb.org/21922 http://www.osvdb.org/21923 http://www.osvdb.org/21919 http://www.osvdb.org/21920 http://www.osvdb.org/21921 http://pridels0.blogspot.com/2005/12/bitweaver-multiple-vuln.html http://www.vupen.com/english/advisories/2005/2975 https://exchange.xforce.ibmcloud.com/vulnerabilities/23814 https://nvd.nist.gov https://www.exploit-db.com/exploits/26904/

CVE-2005-4380

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect