CVEvulnerability

CVE-2007-5270

7.5 HIGH Published 2007-10-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-10-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Unspecified vulnerability in the Boost module before 4.7.x-1.0, and 5.x before 5.x-1.0, for Drupal allows remote attackers to create or overwrite arbitrary files, and conduct cross-site scripting attacks (XSS) via unspecified vectors.

Affected configurations

• bendiken boost module for drupal (<= 4.7.-1.0) • bendiken boost module for drupal (<= 5.-1.0)

References