Description

The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fields of an internal Drupal form, which allows remote authenticated users to bypass intended access restrictions via modified field values.

Remediation

References

CVE-2008-4792

Related Vulnerabilities

Joomla Missing Authorization Vulnerability (CVE-2019-18674)

WordPress Plugin FV Flowplayer Video Player Cross-Site Scripting (6.6.4)

WordPress Plugin Google Shortlink by BestWebSoft Cross-Site Scripting (1.5.2)

WordPress Plugin Maps Widget for Google Maps-Google Maps Builder Security Bypass (4.16)

MySQL CVE-2022-21317 Vulnerability (CVE-2022-21317)

Severity

Medium

Classification

CVE-2008-4792 CWE-264

Tags

Missing Update Known Vulnerabilities