CVE-2006-3102

EPSS 7.80% · P92 Updated Feb 27, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2006-3102

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remote attackers to execute arbitrary PHP code by uploading arbitrary files with double extensions, which are stored for a small period of time under the webroot in the temp/articles directory.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Bitweaver articles/BitArticle.php 任意PHP代码执行漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Bitweaver 1.3中的articles/BitArticle.php存在竞态条件。在带mod_mime扩展名的Apache上运行时，远程攻击者可以通过上传可在temp/articles目录中的webroot下短时间储存的，带有双重扩展名的任意文件，执行任意PHP代码。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2006-3102

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2006-3102

请登录查看更多情报信息。

http://retrogod.altervista.org/bitweaver_13_xpl.htmlx_refsource_MISC
http://www.bitweaver.org/articles/45x_refsource_CONFIRM
http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358x_refsource_CONFIRM
http://securityreason.com/securityalert/1115third-party-advisoryx_refsource_SREASON
https://www.exploit-db.com/exploits/1918exploitx_refsource_EXPLOIT-DB
http://secunia.com/advisories/20695third-party-advisoryx_refsource_SECUNIA
http://www.osvdb.org/26587vdb-entryx_refsource_OSVDB
http://www.vupen.com/english/advisories/2006/2405vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/27215vdb-entryx_refsource_XF
http://www.securityfocus.com/archive/1/437491/100/0/threadedmailing-listx_refsource_BUGTRAQ
https://nvd.nist.gov/vuln/detail/CVE-2006-3102

Same Patch Batch · n/a · 2006-06-21 · 16 CVEs total

CVE-2006-3127		Sun Java Enterprise System/Java System 目录服务器网络安全服务库内存泄露漏洞
CVE-2006-3128		Easy CMS choose_file.php 任意文件上传漏洞
CVE-2006-2911		CMS Mundo index.php SQL注入漏洞
CVE-2006-2931		CMS MUNDO 图像文件上传任意代码执行漏洞
CVE-2006-3101		Cisco Secure ACS loginproxy.cgi 跨站脚本漏洞
CVE-2006-3103		Bitweaver 多个跨站脚本攻击(XSS)漏洞
CVE-2006-3104		Bitweaver index.php 信息泄露漏洞
CVE-2006-3105		Bitweaver CRLF注入漏洞
CVE-2006-3106		phpMyDesktop\|Arcade index.php 跨站点脚本(XSS)漏洞
CVE-2006-3107		Docebo 多个PHP远程文件包含漏洞
CVE-2006-3108		EmailArchitect Email Server 多个跨站脚本攻击(XSS)漏洞
CVE-2006-3109		Cisco CallManager 多个跨站脚本攻击漏洞
CVE-2006-3110		Chipmailer main.php 跨站脚本攻击(XSS)漏洞
CVE-2006-3111		Chipmailer main.php 多个SQL注入漏洞
CVE-2006-3112		Chipmailer php.php直接请求信息泄露漏洞

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2006-3102

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2006-3102

I. Basic Information for CVE-2006-3102

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2006-3102

III. Intelligence Information for CVE-2006-3102

Same Patch Batch · n/a · 2006-06-21 · 16 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2006-3102

Leave a comment