medium5.5
CVE-2008-3745
The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes, delete files, and download unauthorized attachments via unspecified…
Impact
The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes, delete files, and download unauthorized attachments via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Drupal | Versions 6.0, 6.1, 6.2, 6.3 |
| Drupal | Upload Module | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/295053
- http://secunia.com/advisories/31825
- http://www.securityfocus.com/bid/30689
- http://www.vupen.com/english/advisories/2008/2392
- https://bugzilla.redhat.com/show_bug.cgi?id=459108
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44458
- https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html
- https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html
- http://drupal.org/node/295053
- http://secunia.com/advisories/31825
- http://www.securityfocus.com/bid/30689
- http://www.vupen.com/english/advisories/2008/2392
- https://bugzilla.redhat.com/show_bug.cgi?id=459108
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44458
- https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html
- https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html