Unscored severity · published Jul 5, 2006
CVE-2006-3336
TWiki 01-Dec-2000 up to 4.0.3 allows remote attackers to bypass the upload filter and execute arbitrary code via filenames with double extensions such as ".php.en", ".php.1", and…
–
CVSS
2.9%
EPSS
No
On KEV
Description
TWiki 01-Dec-2000 up to 4.0.3 allows remote attackers to bypass the upload filter and execute arbitrary code via filenames with double extensions such as ".php.en", ".php.1", and other allowed extensions that are not .txt. NOTE: this is only a vulnerability when the server allows script execution in the pub directory.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TW
Twiki · Twiki
4.0; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 2000-12-01; +7 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3336
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3336
Patch
http://secunia.com/advisories/20992
Exploit
http://securitytracker.com/id?1016458
Patch
http://twiki.org/cgi-bin/view/Codev/SecurityAlertSecureFileUploads
www.securityfocus.com
http://www.securityfocus.com/bid/18854
www.vupen.com
http://www.vupen.com/english/advisories/2006/2677
More from Twiki
9.8
CVE-2013-1751
TWiki before 5.1.4 allows remote attackers to execute arbitrary shell commands by sending a crafted '%MAKETEXT{}%' parameter value containing Perl backtick characters
9.8
CVE-2005-3056
TWiki allows arbitrary shell command execution via the Include function
9.1
CVE-2014-7236
Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary Perl code via the debugenableplugins parameter to…
6.1
CVE-2018-20212
bin/statistics in TWiki 6.0.2 allows cross-site scripting (XSS) via the webs parameter
–
CVE-2014-9367
Incomplete blacklist vulnerability in the urlEncode function in lib/TWiki.pm in TWiki 6.0.0 and 6.0.1 allows remote attackers to conduct cross-site scripting (XSS) attacks via a…