CVE-2007-6412

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-12-17 · updated 2026-06-16
Weakness: CWE-94

Description

Direct static code injection vulnerability in wiki/index.php in Bitweaver 2.0.0 and earlier, when comments are enabled, allows remote attackers to inject arbitrary PHP code via an editcomments action.

Affected products

Bitweaver: through 2.0.0

References

http://osvdb.org/40148
http://securityreason.com/securityalert/3428
http://securityreason.com/securityalert/3454
http://www.hackerscenter.com/archive/view.asp?id=28129
http://www.securityfocus.com/archive/1/484805/100/0/threaded
http://www.securityfocus.com/bid/26801
http://osvdb.org/40148
http://securityreason.com/securityalert/3428
http://securityreason.com/securityalert/3454
http://www.hackerscenter.com/archive/view.asp?id=28129
http://www.securityfocus.com/archive/1/484805/100/0/threaded
http://www.securityfocus.com/bid/26801

Get alerted when CVE-2007-6412 or the next vulnerability affects your stack