CVE-2006-3105

EPSS 4.08% · P89 Updated Feb 27, 2026

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2006-3105

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP headers, as demonstrated by the BWSESSION parameter in index.php.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Bitweaver CRLF注入漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Bitweaver 1.3存在CRLF注入漏洞。远程攻击者可以借助注入HTTP标头的多个未明参数中的CRLF序列，进行 HTTP 响应拆分攻击。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2006-3105

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2006-3105

请登录查看更多情报信息。

http://retrogod.altervista.org/bitweaver_13_xpl.htmlx_refsource_MISC
http://www.bitweaver.org/articles/45x_refsource_CONFIRM
http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358x_refsource_CONFIRM
http://securityreason.com/securityalert/1115third-party-advisoryx_refsource_SREASON
https://exchange.xforce.ibmcloud.com/vulnerabilities/27348vdb-entryx_refsource_XF
http://www.securityfocus.com/archive/1/437491/100/0/threadedmailing-listx_refsource_BUGTRAQ
https://nvd.nist.gov/vuln/detail/CVE-2006-3105

Same Patch Batch · n/a · 2006-06-21 · 16 CVEs total

CVE-2006-3127		Sun Java Enterprise System/Java System 目录服务器网络安全服务库内存泄露漏洞
CVE-2006-3128		Easy CMS choose_file.php 任意文件上传漏洞
CVE-2006-2911		CMS Mundo index.php SQL注入漏洞
CVE-2006-2931		CMS MUNDO 图像文件上传任意代码执行漏洞
CVE-2006-3101		Cisco Secure ACS loginproxy.cgi 跨站脚本漏洞
CVE-2006-3102		Bitweaver articles/BitArticle.php 任意PHP代码执行漏洞
CVE-2006-3103		Bitweaver 多个跨站脚本攻击(XSS)漏洞
CVE-2006-3104		Bitweaver index.php 信息泄露漏洞
CVE-2006-3106		phpMyDesktop\|Arcade index.php 跨站点脚本(XSS)漏洞
CVE-2006-3107		Docebo 多个PHP远程文件包含漏洞
CVE-2006-3108		EmailArchitect Email Server 多个跨站脚本攻击(XSS)漏洞
CVE-2006-3109		Cisco CallManager 多个跨站脚本攻击漏洞
CVE-2006-3110		Chipmailer main.php 跨站脚本攻击(XSS)漏洞
CVE-2006-3111		Chipmailer main.php 多个SQL注入漏洞
CVE-2006-3112		Chipmailer php.php直接请求信息泄露漏洞

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2006-3105

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2006-3105

I. Basic Information for CVE-2006-3105

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2006-3105

III. Intelligence Information for CVE-2006-3105

Same Patch Batch · n/a · 2006-06-21 · 16 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2006-3105

Leave a comment