CVE-2007-0505

Publicada em 26 jan 2007 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 2.9%

Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue.

Produtos afetados

n/a · n/a

Referências

http://drupal.org/node/112146 http://osvdb.org/32134 http://secunia.com/advisories/23887 https://exchange.xforce.ibmcloud.com/vulnerabilities/31729 http://www.securityfocus.com/bid/22224 http://www.vupen.com/english/advisories/2007/0312