NuytsTech Security

CVE-2007-6651

by ·

Directory traversal vulnerability in wiki/edit.php in Bitweaver R2 CMS allows remote attackers to obtain sensitive information (script source code) via a .. (dot dot) in the suck_url parameter.

Date published : 2008-01-04

http://www.securityfocus.com/bid/27081

http://www.securityfocus.com/archive/1/485642/100/0/threaded

Tags: