OSVDB ID: 41068

Title: Comment Upload Module for Drupal Arbitrary File Upload

Info

Disclosure

Jan 30, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Disclosure: Vendor Verified

Solution

Upgrade to version 4.7.x-0.1 or 5.x-0.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Credit

  • webernet -


Direct URL: http://osvdb.org/36218