CVE-2006-3102

EPSS 8.3%

Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remote attackers to execute arbitrary PHP code by uploading arbitrary files with double extensions, which are stored for a small period of time under the webroot in the temp/articles directory.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/1918unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://retrogod.altervista.org/bitweaver_13_xpl.html http://secunia.com/advisories/20695 http://securityreason.com/securityalert/1115 https://exchange.xforce.ibmcloud.com/vulnerabilities/27215 http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358 https://www.exploit-db.com/exploits/1918 http://www.bitweaver.org/articles/45 http://www.osvdb.org/26587 http://www.securityfocus.com/archive/1/437491/100/0/threaded http://www.vupen.com/english/advisories/2006/2405