medium6.0
CVE-2008-4790
The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictions and read "files attached to content" …
Impact
The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictions and read "files attached to content" via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Drupal | through 5.10 Versions 5.0, 5.1, 5.2, 5.3, 5.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/318706
- http://secunia.com/advisories/32198
- http://secunia.com/advisories/32200
- http://www.openwall.com/lists/oss-security/2008/10/21/7
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45758
- http://drupal.org/node/318706
- http://secunia.com/advisories/32198
- http://secunia.com/advisories/32200
- http://www.openwall.com/lists/oss-security/2008/10/21/7
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45758