Total vulnerabilities in the database
Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remote attackers to execute arbitrary PHP code by uploading arbitrary files with double extensions, which are stored for a small period of time under the webroot in the temp/articles directory.
Software | From | Fixed in |
---|---|---|
bitweaver / bitweaver | 1.3 | 1.3.x |