CVE-2008-0569 | BDVDB-2026-29013 Detail

Description#

The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2008/0374/references
http://drupal.org/node/216024
http://secunia.com/advisories/28729
http://drupal.org/node/216036
http://www.securityfocus.com/bid/27544
http://drupal.org/node/216035

Exploit#

No public exploit known

History#

Version 12008-02-05Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.