CVE-2007-6412

Direct static code injection vulnerability in Bitweaver wiki/index.php (versions 2.0.0 and earlier) when comments are enabled. Remote attackers can inject arbitrary PHP code via the editcomments action. Evidence from multiple sources confirms the affected component, condition, and exact impact; n...