Lucene search
HistoryFeb 05, 2008 - 2:00 a.m.
CVE-2008-0569
cve-2008-0569
comment upload
drupal
upload validation
arbitrary code
remote attack
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.5 High
AI Score
Confidence
Low
0.02 Low
EPSS
Percentile
88.8%
The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors.
Affected configurations
Node
drupalcomment_upload_moduleMatch4.7
ORdrupalcomment_upload_moduleMatch5.0
Related
prion
prion
Input validation
2008-02-05 02:00:00
nvd
nvd
CVE-2008-0569
2008-02-05 02:00:00
cvelist
cvelist
CVE-2008-0569
2008-02-05 01:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.5 High
AI Score
Confidence
Low
0.02 Low
EPSS
Percentile
88.8%
Related for CVE-2008-0569