CVE-2006-3336

CVE-2006-3336 describes a vulnerability in TWiki versions up to 4.0.3, allowing remote attackers to bypass upload filters and execute arbitrary code. This is achieved by uploading files with double extensions (e.g., ".php.en") in scenarios where the server permits script execution in the pub directory. The vulnerability has a CVSS score of 4.0 (AV:N/AC:H/Au:N/C:P/I:P/A:N), indicating network access, high attack complexity, and partial impact on confidentiality and integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.