NVD

Id
61428  
Name
CVE-2006-2743  
Description
Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple extensions, which allows remote attackers to upload, modify, or execute arbitrary files in the files directory.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-01  
Modified Date
2011-03-07  
Seq
2006-2743  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317414 61428 CVE-2006-2743 http://drupal.org/node/65409  View
317415 61428 CVE-2006-2743 1821  View
317416 61428 CVE-2006-2743 DSA-1125  View
317417 61428 CVE-2006-2743 20060602 [DRUPAL-SA-2006-006] Drupal 4.6.7 / 4.7.1 fixes arbitrary file execution issue  View
317418 61428 CVE-2006-2743 18245  View
317419 61428 CVE-2006-2743 ADV-2006-1975  View
317420 61428 CVE-2006-2743 drupal-files-script-execution(26655)  View

Related JVN