Drupal Permissions Privileges and Access Controls Vulnerability - CVE-2008-3745 - Vulnerability Database

Drupal Permissions Privileges and Access Controls Vulnerability - CVE-2008-3745

Medium
Reference: CVE-2008-3745
Title: Drupal Permissions Privileges and Access Controls Vulnerability
Overview:

The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes delete files and download unauthorized attachments via unspecified vectors.