CVE-2007-6374
- State
- Published
- Severity
- Not scored
- Published
- Dec 15, 2007
- Updated
- Aug 7, 2024
- Reserved
- Dec 14, 2007
Description
Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) users/register.php or (2) search/index.php, or an editcomments action in (3) wiki/index.php or (4) forums/index.php. NOTE: the error parameter to users/login.php is covered by CVE-2006-3103.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 39130vdb-entry
- ADV-2007-4168vdb-entry
- bitweaver-register-index-login-xss(38942)vdb-entry
- 39129vdb-entry
- http://www.hackerscenter.com/archive/view.asp?id=28129
- 20071209 Bitweaver XSS & SQL Injection Vulnerabilitymailing-list
- 28024third-party-advisory
- 3428third-party-advisory
- 26801vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.