CVE-2010-3092 | BDVDB-2026-43359 Detail

Description#

The upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case-insensitive filename handling in a database configuration, which allows remote authenticated users to bypass the intended restrictions on downloading a file by uploading a different file with a similar name.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12010-09-21Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.