CVE-2008-0569 The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and....
MediumCVSS 6.4
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| drupal comment upload module | = 4.7 | No fix listed |
| drupal comment upload module | = 5.0 | No fix listed |
References
- drupal.org
- drupal.org
- drupal.org
- 28729 third-party-advisory vendor-advisory
- 27544 vdb-entry
- ADV-2008-0374 vdb-entry