Lucene search
HistoryJul 03, 2008 - 6:41 p.m.
CVE-2008-3001
aggregation module
drupal
cve-2008-3001
file upload vulnerability
remote code execution
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
High
0.04 Low
EPSS
Percentile
92.1%
The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute arbitrary code, via a crafted feed that allows upload of files with arbitrary extensions.
Affected configurations
Node
drupalaggregation_moduleMatch3.0
ORdrupalaggregation_moduleMatch3.1
ORdrupalaggregation_moduleMatch3.2
ORdrupalaggregation_moduleMatch4.0
ORdrupalaggregation_moduleMatch4.1
ORdrupalaggregation_moduleMatch4.2
ORdrupalaggregation_moduleMatch4.3
ORdrupalaggregation_moduleMatch5
Related
prion
prion
Code injection
2008-07-03 18:41:00
cvelist
cvelist
CVE-2008-3001
2008-07-03 17:47:00
nvd
nvd
CVE-2008-3001
2008-07-03 18:41:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
High
0.04 Low
EPSS
Percentile
92.1%
Related for CVE-2008-3001