CVE-2008-4792 | BDVDB-2026-33141 Detail

Description#

The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fields of an internal Drupal form, which allows remote authenticated users to bypass intended access restrictions via modified field values.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://drupal.org/node/318706
http://secunia.com/advisories/32201
http://www.openwall.com/lists/oss-security/2008/10/21/7
https://exchange.xforce.ibmcloud.com/vulnerabilities/45761

Exploit#

No public exploit known

History#

Version 12008-10-29Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.