EDB-4814
functionalBitweaver R2 CMS - Arbitrary File Upload / Disclosure
view exploit source exploit_dbverifiedtype webappsauthor BugReport.IRpublished 2007-12-30catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2007-6650US | high7.5 | Exploit | ||
Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly… | ||||
| CVE-2007-6651US | medium5.0 | Exploit | ||
Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive information (script source code) via a .. (dot dot) in the suck_u… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan