CVE-2007-6412

CVE-2007-6412

EPSS 1.5%

Direct static code injection vulnerability in wiki/index.php in Bitweaver 2.0.0 and earlier, when comments are enabled, allows remote attackers to inject arbitrary PHP code via an editcomments action.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/40148 http://securityreason.com/securityalert/3428 http://securityreason.com/securityalert/3454 http://www.hackerscenter.com/archive/view.asp?id=28129 http://www.securityfocus.com/archive/1/484805/100/0/threaded http://www.securityfocus.com/bid/26801