CVE-2007-6412

bitweaver < 2.0.0 - Remote Code Execution via Wiki Comments Edit Action

Title source: llm
STIX 2.1

Description

Direct static code injection vulnerability in wiki/index.php in Bitweaver 2.0.0 and earlier, when comments are enabled, allows remote attackers to inject arbitrary PHP code via an editcomments action.

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/40148
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3454
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/484805/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3428
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26801

Scores

EPSS 0.0152
EPSS Percentile 71.4%

Details

CWE
CWE-94
Status published
Products (1)
bitweaver/bitweaver < 2.0.0
Published Dec 17, 2007
Tracked Since Feb 18, 2026