VYPR
Medium severity6.1NVD Advisory· Published Nov 13, 2019· Updated Jun 16, 2026

CVE-2012-5193

CVE-2012-5193

Description

Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the path info to (1) stats/index.php or (2) newsletters/edition.php or the (3) username parameter to users/remind_password.php, (4) days parameter to stats/index.php, (5) login parameter to users/register.php, or (6) highlight parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • cpe:2.3:a:bitweaver:bitweaver:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bitweaver:bitweaver:*:*:*:*:*:*:*:*range: <=2.8.1
    • (no CPE)range: <=2.8.1
  • Bitweaver/Bitweaverdescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.