Description

The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes, delete files, and download unauthorized attachments via unspecified vectors.

Remediation

References

CVE-2008-3745

Related Vulnerabilities

AbanteCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20141)

MediaWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2017-0372)

WordPress Plugin Media Tagz Gallery Multiple Unspecified Vulnerabilities (1.0)

WordPress 4.8.x Directory Traversal (4.8 - 4.8.24)

MySQL CVE-2016-8318 Vulnerability (CVE-2016-8318)

Severity

Medium

Classification

CVE-2008-3745 CWE-264

Tags

Missing Update Known Vulnerabilities