Lucene search
+L

3 matches found

NVD
NVD
added 2007/01/13 2:28 a.m.23 views

CVE-2006-6924

bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sortmode=-98 query string to 1 blogs/listblogs.php, 2 fisheye/index.php, 3 wiki/orphanpages.php, or 4 wiki/listpages.php, which forces a SQL error. NOTE: the fisheye/listgalleries.php vector is already cover...

5CVSS6.5AI score0.033EPSS
SaveExploits5References6
Cvelist
Cvelist
added 2007/01/13 2:0 a.m.25 views

CVE-2006-6924

bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sortmode=-98 query string to 1 blogs/listblogs.php, 2 fisheye/index.php, 3 wiki/orphanpages.php, or 4 wiki/listpages.php, which forces a SQL error. NOTE: the fisheye/listgalleries.php vector is already cover...

6.5AI score0.033EPSS
SaveExploits5References6
CVE
CVE
added 2007/01/13 2:0 a.m.58 views

CVE-2006-6924

CVE-2006-6924 affects Bitweaver 1.3.1 and earlier, where a remote attacker can trigger a SQL error and potentially expose sensitive information by sending sort_mode=-98 to one of: blogs/list_blogs.php, fisheye/index.php, wiki/orphan_pages.php, or wiki/list_pages.php. The issue is described as a v...

5CVSS6.6AI score0.033EPSS
SaveExploits5References6Affected Software1
Rows per page
Query Builder