CVE-2007-6375: Bitweaver

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) sort_mode parameter to wiki/list_pages.php and the (2) highlight parameter to search/index.php. NOTE: the researcher also reported injection via JavaScript code in the Search box, but this is probably a forced SQL error or other separate primary issue.

Affected products

• Bitweaver Bitweaver: up to and including 2.0.0; version 1.1.1_beta only; version 1.2.1 only; version 1.3 only; version 1.3.1 only

Published 2007-12-15. Last modified 2026-06-16.