CVE-2006-7109

Summary: CVE-2006-7109 is an unrestricted file upload vulnerability in the IMCE Drupal module (before 1.6). The issue allows remote authenticated users to upload arbitrary PHP code by using a filename with a double extension such as .php.gif. Details from connected docs: The HackerOne report prov...

CVE-2006-7110

The CVE-2006-7110 entry covers a directory traversal vulnerability in the IMCE Drupal module’s delete function. It allows remote authenticated users to delete arbitrary files by supplying ".." sequences. Affected component: IMCE module (Drupal) prior to version 1.6. Root cause: improper sanitizat...