CVE-2005-4380

EPSS 2.2%

Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL commands via the (1) sort_mode parameter to (a) fisheye/list_galleries.php, (b) messages/message_box.php, and (c) users/my.php; the (2) post_id parameter to (d) blogs/view_post.php; and the (3) blog_id parameter to (e) blogs/view.php, which are not properly cleansed by the convert_sortmode function in kernel/BitDb.php.

Affected products

n/a · n/a

public PoCs found — 5

exploitdbwww.exploit-db.com/exploits/26907unverified exploitdbwww.exploit-db.com/exploits/26908unverified exploitdbwww.exploit-db.com/exploits/26906unverified exploitdbwww.exploit-db.com/exploits/26905unverified exploitdbwww.exploit-db.com/exploits/26904unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://pridels0.blogspot.com/2005/12/bitweaver-multiple-vuln.html https://exchange.xforce.ibmcloud.com/vulnerabilities/23814 http://www.bitweaver.org/forums/viewtopic.php?t=1299 http://www.osvdb.org/21919 http://www.osvdb.org/21920 http://www.osvdb.org/21921 http://www.osvdb.org/21922 http://www.osvdb.org/21923 http://www.securityfocus.com/bid/15962 http://www.vupen.com/english/advisories/2005/2975