CVE-2006-6924

bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sort_mode=-98 query string to (1) blogs/list_blogs.php, (2) fisheye/index.php, (3) wiki/orphan_pages.php, or (4) wiki/list_pages.php, which forces a SQL error. NOTE: the fisheye/list_galleries.php vector is already covered by CVE-2005-4380.

• http://archives.neohapsis.com/archives/bugtraq/2006-11/0142.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/22793Vendor Advisory
• http://securityreason.com/securityalert/2144
• http://www.securityfocus.com/bid/20996Exploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/4485
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30165
• http://archives.neohapsis.com/archives/bugtraq/2006-11/0142.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/22793Vendor Advisory
• http://securityreason.com/securityalert/2144
• http://www.securityfocus.com/bid/20996Exploit, Vendor Advisory
• http://www.vupen.com/english/advisories/2006/4485
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30165

Published

Jan 13, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6918Unspecified vulnerability in the Admin login for Georgian di…
• CVE-2006-6919Firefox Sage extension 1.3.8 and earlier allows remote attac…
• CVE-2006-6920Cross-site scripting (XSS) vulnerability in Nucleus before 3…
• CVE-2006-6921Unspecified versions of the Linux kernel allow local users t…
• CVE-2006-6922SQL injection vulnerability in Deadlock User Management Syst…
• CVE-2006-6923SQL injection vulnerability in newsletters/edition.php in bi…
• CVE-2006-6925Multiple cross-site scripting (XSS) vulnerabilities in bitwe…
• CVE-2006-6926Buffer overflow in eXtremail 2.1 has unknown impact and atta…
• CVE-2006-6927Multiple SQL injection vulnerabilities in Rialto 1.6 allow r…
• CVE-2006-6928Multiple cross-site scripting (XSS) vulnerabilities in Rialt…
• CVE-2006-6929Multiple cross-site scripting (XSS) vulnerabilities in Rapid…
• CVE-2006-6930SQL injection vulnerability in viewad.asp in Rapid Classifie…