The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes, delete files, and download unauthorized attachments via unspecified vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Drupal | Drupal | 6.0 (including) | 6.0 (including) |
| Drupal | Drupal | 6.1 (including) | 6.1 (including) |
| Drupal | Drupal | 6.2 (including) | 6.2 (including) |
| Drupal | Drupal | 6.3 (including) | 6.3 (including) |
| Upload_module | Drupal | * | * |