EDB-28949

functional

bitweaver 1.x - '/newsletters/edition.php?tk' SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor laurent gaffiepublished 2006-11-09catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2006-6923UShigh7.5Exploit
SQL injection vulnerability in newsletters/edition.php in bitweaver 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the tk parameter.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan