Vulnerabilities > Bitweaver > Bitweaver > 2.0.0
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2014-01-28 | CVE-2012-5192 | Path Traversal vulnerability in Bitweaver Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files via "''%2F" (dot dot encoded slash) sequences in the overlay_type parameter. | 5.0 |
| 2009-05-18 | CVE-2009-1678 | Path Traversal vulnerability in Bitweaver Directory traversal vulnerability in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allows remote attackers to create or overwrite arbitrary files via a .. | 7.5 |
| 2009-05-18 | CVE-2009-1677 | Code Injection vulnerability in Bitweaver Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allow (1) remote authenticated users to inject arbitrary PHP code into files by placing PHP sequences into the account's "display name" setting and then invoking boards/boards_rss.php, and might allow (2) remote attackers to inject arbitrary PHP code into files via the HTTP Host header in a request to boards/boards_rss.php. | 6.5 |
| 2008-01-04 | CVE-2007-6651 | Path Traversal vulnerability in Bitweaver 2.0.0 Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive information (script source code) via a .. | 5.0 |