CVE-2012-5193

Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the path info to (1) stats/index.php or (2) newsletters/edition.php or the (3) username parameter to users/remind_password.php, (4) days parameter to stats/index.php, (5) login parameter to users/register.php, or (6) highlight parameter.

• CWE-79

• https://www.exploit-db.com/exploits/22216Exploit, Third Party Advisory, VDB Entry
• https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/twsl2012-016-multiple-vulnerabilities-in-bitweaver/Third Party Advisory
• https://www.exploit-db.com/exploits/22216Exploit, Third Party Advisory, VDB Entry
• https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/twsl2012-016-multiple-vulnerabilities-in-bitweaver/Third Party Advisory

Published

Nov 13, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5186Cross-site scripting (XSS) vulnerability in FLUGELz netmania…
• CVE-2012-5187The Weathernews Touch application 2.3.2 and earlier for Andr…
• CVE-2012-5188Untrusted search path vulnerability in mora Downloader befor…
• CVE-2012-5189Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2012-5190Prizm Content Connect 5.1 has an Arbitrary File Upload Vulne…9.8
• CVE-2012-5192Directory traversal vulnerability in gmap/view_overlay.php i…
• CVE-2012-5195Heap-based buffer overflow in the Perl_repeatcpy function in…
• CVE-2012-5196Multiple buffer overflows in Condor 7.6.x before 7.6.10 and …
• CVE-2012-5197Multiple unspecified vulnerabilities in Condor 7.6.x before …
• CVE-2012-5198Unspecified vulnerability in HP ArcSight Connector Appliance…
• CVE-2012-5199Unspecified vulnerability in HP ArcSight Connector Appliance…
• CVE-2012-5200Cross-site scripting (XSS) vulnerability in HP Intelligent M…