CVE-2012-5192: Bitweaver

Medium severity, CVSS 5.0. EPSS: 52.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files via "''%2F" (dot dot encoded slash) sequences in the overlay_type parameter.

Affected products

• Bitweaver Bitweaver: up to and including 2.8.1; version 1.1 only; version 1.1.1_beta only; version 1.2.1 only; version 1.3 only; version 1.3.1 only; …

Published 2014-01-28. Last modified 2026-06-16.