PT-2007-7269 · Bitweaver · Bitweaver

Doz · Publicado 2007-12-17 · Atualizado 2018-10-15 · CVE-2007-6412

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Bitweaver versions 2.0.0 and earlier

Description A direct static code injection issue exists when comments are enabled, allowing remote attackers to inject arbitrary PHP code via an editcomments action.

Recommendations For Bitweaver versions 2.0.0 and earlier, consider disabling the comments feature to prevent exploitation until a fix is available.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2007-6412

Produtos afetados

Bitweaver

Referências · 8

• 🔥 http://hackerscenter.com/archive/view.asp?id=28129 · Exploit
• 🔥 http://securityfocus.com/bid/26801 · Exploit
• http://osvdb.org/40148 · Nota
• http://securityreason.com/securityalert/3428 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6412 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6412 · Nota
• http://securityreason.com/securityalert/3454 · Nota
• http://securityfocus.com/archive/1/484805/100/0/threaded · Nota