VULNERABILITY INTELLIGENCE
CVE-2006-3102
CVSS score5.1 MEDIUM
EPSS probability8.45%
CISA KEVNot currently listed
Published2006-06-21
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remote attackers to execute arbitrary PHP code by uploading arbitrary files with double extensions, which are stored for a small period of time under the webroot in the temp/articles directory.
Primary references
- cve@mitre.org — Exploit
- cve@mitre.org — Exploit, Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Vendor Advisory