CVE-2006-6924
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 3.4%
from disclosure to weapon0 days
Published on NVDJan 13
1st PoCNov 10
exploitation probability
3.4%top 12% of all CVEs
observed exploitation
nono source reports it
4 public exploit(s)
bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sort_mode=-98 query string to (1) blogs/list_blogs.php, (2) fisheye/index.php, (3) wiki/orphan_pages.php, or (4) wiki/list_pages.php, which forces a SQL error. NOTE: the fisheye/list_galleries.php vector is already covered by CVE-2005-4380.
Affected products
n/a · n/apublic PoCs found — 4✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28953exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28965exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28964exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28963⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.