CVE-2007-6651

bitweaver - Path Traversal via wiki/edit.php suck_url Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-6651. PoCs published by BugReport.IR.

AI-analyzed exploit summary The document describes two vulnerabilities in Bitweaver R2 CMS: arbitrary file upload due to insufficient content-type validation and source code disclosure via directory traversal in the 'suck_url' parameter. No executable exploit code is provided.

Description

Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive information (script source code) via a .. (dot dot) in the suck_url parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by BugReport.IR · textwebappsphp

https://www.exploit-db.com/exploits/4814

View Code ZIP pw:eip

The document describes two vulnerabilities in Bitweaver R2 CMS: arbitrary file upload due to insufficient content-type validation and source code disclosure via directory traversal in the 'suck_url' parameter. No executable exploit code is provided.

Classification

Writeup 90%

Attack Type

Info Leak | Other

Complexity

Trivial

Reliability

Theoretical

Target: Bitweaver R2 CMS

No auth needed

Prerequisites: Network access to the target · Bitweaver R2 CMS installation

MITRE ATT&CK