NVD

Id
61516  
Name
CVE-2006-2831  
Description
Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disabled within .htaccess, allows remote attackers to execute arbitrary code by uploading a file with multiple extensions, a variant of CVE-2006-2743.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-05  
Modified Date
2008-09-05  
Seq
2006-2831  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318189 61516 CVE-2006-2831 http://drupal.org/files/sa-2006-007/advisory.txt  View
318190 61516 CVE-2006-2831 http://drupal.org/node/66763  View
318191 61516 CVE-2006-2831 1042  View
318192 61516 CVE-2006-2831 DSA-1125  View
318193 61516 CVE-2006-2831 20060602 [DRUPAL-SA-2006-007] Drupal 4.6.8 / 4.7.2 fixes arbitrary file execution issue  View
318194 61516 CVE-2006-2831 18245  View

Related JVN