Drupal Permissions Privileges and Access Controls Vulnerability - CVE-2008-4790 - Vulnerability Database

Drupal Permissions Privileges and Access Controls Vulnerability - CVE-2008-4790

Medium
Reference: CVE-2008-4790
Title: Drupal Permissions Privileges and Access Controls Vulnerability
Overview:

The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictions and read quotfiles attached to contentquot via unknown vectors.