Security Advisory

CVE-2008-3742

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-08-27 15:00:00

Last updated 2024-08-07 09:52:59

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, which is not validated.

← Browse all CVEs View on cve.org ↗