CVE Vulnerabilities

CVE-2008-3742

Published: Aug 27, 2008 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, which is not validated.

Affected Software

Name Vendor Start Version End Version
Drupal Drupal 5.0 (including) 5.0 (including)
Drupal Drupal 5.1 (including) 5.1 (including)
Drupal Drupal 5.2 (including) 5.2 (including)
Drupal Drupal 5.3 (including) 5.3 (including)
Drupal Drupal 5.4 (including) 5.4 (including)
Drupal Drupal 5.5 (including) 5.5 (including)
Drupal Drupal 5.6 (including) 5.6 (including)
Drupal Drupal 5.7 (including) 5.7 (including)
Drupal Drupal 5.8 (including) 5.8 (including)
Drupal Drupal 5.9 (including) 5.9 (including)
Drupal Drupal 6.0 (including) 6.0 (including)
Drupal Drupal 6.1 (including) 6.1 (including)
Drupal Drupal 6.2 (including) 6.2 (including)
Drupal Drupal 6.3 (including) 6.3 (including)
Drupal Ubuntu dapper *
Drupal Ubuntu feisty *
Drupal5 Ubuntu gutsy *
Drupal5 Ubuntu hardy *
Drupal5 Ubuntu upstream *

References