Vulnerability in Drupal Project
CVE-2007-0505
Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue.
EPSS: 0.028 (85.1th percentile) — read the EPSS interpretation.
Affected products
- Drupal Project — versions 4.6, 4.6_1.1, 4.7
- Drupal Project_issue_tracking_module — versions 4.7, 4.7_1.1, 4.7_2.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)