CVE-2007-6650: Bitweaver r2 CMS

High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in fisheye/upload.php in Bitweaver R2 CMS allows remote attackers to upload arbitrary files by using the image/gif content type, and possibly other image and PDF content types, as demonstrated by uploading a .htaccess file.

Affected products

• Bitweaver r2 CMS: any version

Published 2008-01-04. Last modified 2026-06-16.