Code injection

2008-07-0318:41:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

Low

0.04 Low

EPSS

Percentile

92.0%

JSON

The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute arbitrary code, via a crafted feed that allows upload of files with arbitrary extensions.

CPENameOperatorVersion
aggregation_moduleeq5
aggregation_moduleeq3.2
aggregation_moduleeq4.0
aggregation_moduleeq4.1
aggregation_moduleeq4.3
aggregation_moduleeq4.2
aggregation_moduleeq3.1
aggregation_moduleeq3.0

Name	Operator	Version
aggregation_module	eq	5
aggregation_module	eq	3.2
aggregation_module	eq	4.0
aggregation_module	eq	4.1
aggregation_module	eq	4.3
aggregation_module	eq	4.2
aggregation_module	eq	3.1
aggregation_module	eq	3.0