Description

The validation functionality in the core upload module in Drupal 6.x before 6.5 allows remote authenticated users to bypass intended access restrictions and "attach files to content," related to a "logic error."

Remediation

References

CVE-2008-4789

Related Vulnerabilities

WordPress Plugin PWA for WP & AMP Unspecified Vulnerability (1.0.8)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43734)

Drupal Core 4.6.x Security Bypass (4.6.0 - 4.6.3)

MySQL CVE-2018-2590 Vulnerability (CVE-2018-2590)

WordPress Plugin SP Project & Document Manager Multiple SQL Injection Vulnerabilities (2.4.3)

Severity

Medium

Classification

CVE-2008-4789 CWE-264

Tags

Missing Update Known Vulnerabilities