CVE-2007-6650 Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF...
HighCVSS 7.5
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitweaver r2 cms | All versions | No fix listed |
References
- 40155 vdb-entry
- www.bugreport.ir exploit
- 20071230 Bitweaver source code disclosure, arbitrary file upload mailing-list
- 27079 vdb-entry
- bitweaver-upload-file-upload(39321) vdb-entry
- 4814 exploit