| Package | Affected versions | Patched versions |
|---|---|---|
| bitweaver | = 1.3 |
Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remote attackers to execute arbitrary PHP code by uploading arbitrary files with double extensions, which are stored for a small period of time under the webroot in the temp/articles directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free