Title: Comment Upload Module for Drupal Arbitrary File Upload
Info
Disclosure
Jan 30, 2008
Discovery
Unknown
Dates
Exploit
Unknown
Solution
Unknown
Description
Classification
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Disclosure:
Vendor Verified
Solution
Upgrade to version 4.7.x-0.1 or 5.x-0.1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.