Lucene search
HistoryJan 26, 2007 - 12:28 a.m.
CVE-2007-0505
drupal
vulnerability
file upload
cve-2007-0505
nvd
security
7.3 High
AI Score
Confidence
High
8.5 High
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
0.025 Low
EPSS
Percentile
90.1%
Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue.
Affected configurations
Node
drupalprojectMatch4.6
ORdrupalprojectMatch4.6_1.1
ORdrupalprojectMatch4.7
ORdrupalprojectMatch4.7_1.1
ORdrupalprojectMatch4.7_2.1
ORdrupalprojectMatch5.0dev
ORdrupalproject_issue_tracking_moduleMatch4.7
ORdrupalproject_issue_tracking_moduleMatch4.7_1.1
ORdrupalproject_issue_tracking_moduleMatch4.7_2.1
ORdrupalproject_issue_tracking_moduleMatch5.0dev
Related
nvd
nvd
CVE-2007-0505
2007-01-26 00:28:00
prion
prion
Unrestricted file upload
2007-01-26 00:28:00
cvelist
cvelist
CVE-2007-0505
2007-01-26 00:00:00
securityvulns
securityvulns
7.3 High
AI Score
Confidence
High
8.5 High
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
0.025 Low
EPSS
Percentile
90.1%
Related for CVE-2007-0505