CVE-2007-6412: Bitweaver

Medium severity, CVSS 6.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Direct static code injection vulnerability in wiki/index.php in Bitweaver 2.0.0 and earlier, when comments are enabled, allows remote attackers to inject arbitrary PHP code via an editcomments action.

Affected products

• Bitweaver Bitweaver: up to and including 2.0.0

Published 2007-12-17. Last modified 2026-06-16.