CVEs-PoC/2006/CVE-2006-3102.md

CVE-2006-3102

Description

Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remote attackers to execute arbitrary PHP code by uploading arbitrary files with double extensions, which are stored for a small period of time under the webroot in the temp/articles directory.

POC

Reference

• https://www.exploit-db.com/exploits/1918
• https://www.exploit-db.com/exploits/1918

Github

No PoCs found on GitHub currently.