| Package | Affected versions | Patched versions |
|---|---|---|
| bitweaver | = 1.1.1_beta= 1.2.1= 1.3= 1.3.1≤ 2.0.0 |
Multiple SQL injection vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) sort_mode parameter to wiki/list_pages.php and the (2) highlight parameter to search/index.php. NOTE: the researcher also reported injection via JavaScript code in the Search box, but this is probably a forced SQL error or other separate primary issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free