CVE-2006-6924

EPSS 3.3%

bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sort_mode=-98 query string to (1) blogs/list_blogs.php, (2) fisheye/index.php, (3) wiki/orphan_pages.php, or (4) wiki/list_pages.php, which forces a SQL error. NOTE: the fisheye/list_galleries.php vector is already covered by CVE-2005-4380.

Affected products

n/a · n/a

public PoCs found — 4

exploitdbwww.exploit-db.com/exploits/28953unverified exploitdbwww.exploit-db.com/exploits/28963unverified exploitdbwww.exploit-db.com/exploits/28965unverified exploitdbwww.exploit-db.com/exploits/28964unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://archives.neohapsis.com/archives/bugtraq/2006-11/0142.html http://secunia.com/advisories/22793 http://securityreason.com/securityalert/2144 https://exchange.xforce.ibmcloud.com/vulnerabilities/30165 http://www.securityfocus.com/bid/20996 http://www.vupen.com/english/advisories/2006/4485