Lucene search
HistoryJul 05, 2006 - 8:05 p.m.
CVE-2006-3336
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
AI Score
7.5
Confidence
Low
EPSS
0.021
Percentile
89.1%
TWiki 01-Dec-2000 up to 4.0.3 allows remote attackers to bypass the upload filter and execute arbitrary code via filenames with double extensions such as β.php.enβ, β.php.1β, and other allowed extensions that are not .txt. NOTE: this is only a vulnerability when the server allows script execution in the pub directory.
Affected configurations
Node
twikitwikiMatch4.0
ORtwikitwikiMatch4.0.0
ORtwikitwikiMatch4.0.1
ORtwikitwikiMatch4.0.2
ORtwikitwikiMatch4.0.3
ORtwikitwikiMatch2000-12-01
ORtwikitwikiMatch2001-09-01
ORtwikitwikiMatch2001-12-01
ORtwikitwikiMatch2003-02-01
ORtwikitwikiMatch2004-09-01
ORtwikitwikiMatch2004-09-02
ORtwikitwikiMatch2004-09-03
ORtwikitwikiMatch2004-09-04
| Vendor | Product | Version | CPE |
|---|---|---|---|
| twiki | twiki | 4.0 | cpe:2.3:a:twiki:twiki:4.0:*:*:*:*:*:*:* |
| twiki | twiki | 4.0.0 | cpe:2.3:a:twiki:twiki:4.0.0:*:*:*:*:*:*:* |
| twiki | twiki | 4.0.1 | cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:* |
| twiki | twiki | 4.0.2 | cpe:2.3:a:twiki:twiki:4.0.2:*:*:*:*:*:*:* |
| twiki | twiki | 4.0.3 | cpe:2.3:a:twiki:twiki:4.0.3:*:*:*:*:*:*:* |
| twiki | twiki | 2000-12-01 | cpe:2.3:a:twiki:twiki:2000-12-01:*:*:*:*:*:*:* |
| twiki | twiki | 2001-09-01 | cpe:2.3:a:twiki:twiki:2001-09-01:*:*:*:*:*:*:* |
| twiki | twiki | 2001-12-01 | cpe:2.3:a:twiki:twiki:2001-12-01:*:*:*:*:*:*:* |
| twiki | twiki | 2003-02-01 | cpe:2.3:a:twiki:twiki:2003-02-01:*:*:*:*:*:*:* |
| twiki | twiki | 2004-09-01 | cpe:2.3:a:twiki:twiki:2004-09-01:*:*:*:*:*:*:* |
Related
freebsd
freebsd
twiki -- multiple file extensions file upload vulnerability
2006-07-05 00:00:00
ubuntucve
ubuntucve
CVE-2006-3336
2006-07-05 00:00:00
cve
cve
CVE-2006-3336
2006-07-05 20:05:00
seebug
seebug
TWikiθζ¬ζδ»ΆδΈδΌ ζΌζ΄
2007-12-26 00:00:00
cvelist
cvelist
CVE-2006-3336
2006-07-05 20:00:00
openvas
openvas
FreeBSD Ports: twiki
2008-09-04 00:00:00
FreeBSD Ports: twiki
2008-09-04 00:00:00
nessus
nessus
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
AI Score
7.5
Confidence
Low
EPSS
0.021
Percentile
89.1%
Related for NVD:CVE-2006-3336