Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2007-6650

Description

Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file.

POC

Reference

- http://www.bugreport.ir/?/24

- https://www.exploit-db.com/exploits/4814

Github

No PoCs found on GitHub currently.