CVE-2007-0505 Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a....
HighCVSS 8.5
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| drupal project | = 4.6 | No fix listed |
| drupal project | = 4.6_1.1 | No fix listed |
| drupal project | = 4.7 | No fix listed |
| drupal project | = 4.7_1.1 | No fix listed |
| drupal project | = 4.7_2.1 | No fix listed |
| drupal project | = 5.0 | No fix listed |
| drupal project issue tracking module | = 4.7 | No fix listed |
| drupal project issue tracking module | = 4.7_1.1 | No fix listed |
| drupal project issue tracking module | = 4.7_2.1 | No fix listed |
| drupal project issue tracking module | = 5.0 | No fix listed |
References
- drupal.org patch vendor-advisory
- 32134 vdb-entry
- 23887 third-party-advisory
- 22224 vdb-entry
- ADV-2007-0312 vdb-entry
- projecttracking-extension-file-upload(31729) vdb-entry