Drupal Permissions Privileges and Access Controls Vulnerability - CVE-2008-3742 - Vulnerability Database

Drupal Permissions Privileges and Access Controls Vulnerability - CVE-2008-3742

Medium

Reference: CVE-2008-3742

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-3742

Title: Drupal Permissions Privileges and Access Controls Vulnerability

Overview:

Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension which is not validated.