VULNERABILITY INTELLIGENCE

CVE-2008-0569

CVSS score6.4 MEDIUM
EPSS probability2.54%
CISA KEVNot currently listed
Published2008-02-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N

Description

The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors.

Primary references