Description

Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, which is not validated.

Remediation

References

CVE-2008-3742

Related Vulnerabilities

Atlassian Jira Missing Authorization Vulnerability (CVE-2019-15013)

WordPress Plugin Comment and Review Spam Control for WooCommerce Security Bypass (1.4.2)

WordPress Plugin Banner Slider Cross-Site Scripting (1.0)

WordPress Plugin Link Library 'searchll' Parameter SQL Injection (5.2.1)

Restlet Framework Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-14949)

Severity

Medium

Classification

CVE-2008-3742 CWE-264

Tags

Missing Update Known Vulnerabilities