CVE-2016-3168 | BDVDB-2026-75172 Detail

Description#

The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability."

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12016-04-12Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.