cve/2007/CVE-2007-6650.md

CVE-2007-6650

Description

Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file.

POC

Reference

• http://www.bugreport.ir/?/24
• https://www.exploit-db.com/exploits/4814

Github

No PoCs found on GitHub currently.