CVE-2008-4790 | BDVDB-2026-33139 Detail

Description#

The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictions and read "files attached to content" via unknown vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/32198
http://drupal.org/node/318706
http://secunia.com/advisories/32200
https://exchange.xforce.ibmcloud.com/vulnerabilities/45758
http://www.openwall.com/lists/oss-security/2008/10/21/7

Exploit#

No public exploit known

History#

Version 12008-10-29Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.