CVE-2008-4790

The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictions and read "files attached to content" via unknown vectors.

Link	Resource
http://drupal.org/node/318706	Patch Vendor Advisory
http://www.openwall.com/lists/oss-security/2008/10/21/7
http://secunia.com/advisories/32200
http://secunia.com/advisories/32198
https://exchange.xforce.ibmcloud.com/vulnerabilities/45758

Configuration 1

cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:5.0:rc2:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:5.0:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:5.0:rc1:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:5.0:beta2:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:5.0:beta1:*:*:*:*:*:*

---

Published : 2008-10-29 03:31

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-4790

Mitre link : CVE-2008-4790

No products.

CWE-264