CVE

Id
23862  
CVE No.
CVE-2007-0505  
Status
Candidate  
Description
Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue.  
Phase
Assigned (20070125)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
232497 23862 CVE-2007-0505 CONFIRM:http://drupal.org/node/112146  View
232498 23862 CVE-2007-0505 BID:22224  View
232499 23862 CVE-2007-0505 URL:http://www.securityfocus.com/bid/22224  View
232500 23862 CVE-2007-0505 VUPEN:ADV-2007-0312  View
232501 23862 CVE-2007-0505 URL:http://www.vupen.com/english/advisories/2007/0312  View
232502 23862 CVE-2007-0505 OSVDB:32134  View
232503 23862 CVE-2007-0505 URL:http://osvdb.org/32134  View
232504 23862 CVE-2007-0505 SECUNIA:23887  View
232505 23862 CVE-2007-0505 URL:http://secunia.com/advisories/23887  View
232506 23862 CVE-2007-0505 XF:projecttracking-extension-file-upload(31729)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52756 JVNDB-2007-001448 Drupal 用の Acidfree モジュールにおける任意の SQL コマンドを実行される脆弱性 Drupal 用の Acidfree モジュールには、任意の SQL コマンドを実行される脆弱性が存在します。 CVE-2007-0507 23862 6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001448.html  View