CVEvulnerability
CVE-2008-0569
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-02-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors.
Affected configurations
• drupal comment upload module 4.7
• drupal comment upload module 5.0
Related
Weakness · not in database (1)
References
- http://drupal.org/node/216024 drupal.org
- http://drupal.org/node/216035 drupal.org
- http://drupal.org/node/216036 drupal.org
- http://secunia.com/advisories/28729 Vendor Advisory
- http://www.securityfocus.com/bid/27544 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0374/references www.vupen.com
- http://drupal.org/node/216024 drupal.org
- http://drupal.org/node/216035 drupal.org
- http://drupal.org/node/216036 drupal.org
- http://secunia.com/advisories/28729 Vendor Advisory
- http://www.securityfocus.com/bid/27544 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0374/references www.vupen.com