CVE-2006-3102: Bitweaver

Medium severity, CVSS 5.1. EPSS: 8.5% chance of exploitation in the next 30 days.

Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remote attackers to execute arbitrary PHP code by uploading arbitrary files with double extensions, which are stored for a small period of time under the webroot in the temp/articles directory.

Affected products

• Bitweaver Bitweaver: version 1.3 only

Published 2006-06-21. Last modified 2026-06-16.