CVE-2007-0505

Published: Jan 26, 2007Modified: Apr 23, 2026

8.5

Vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 6.8 / Impact: 10.0

Source: NVD

Description

Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue.

Affected (10)

Products: Drupal: Project, Project Issue Tracking Module

Drupal

2 products

Project

Project Issue Tracking Module

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Drupal Project	Version 4.6
Drupal Project	Version 4.6_1.1
Drupal Project	Version 4.7
Drupal Project	Version 4.7_1.1
Drupal Project	Version 4.7_2.1
Drupal Project	Version 5.0
Drupal Project Issue Tracking Module	Version 4.7
Drupal Project Issue Tracking Module	Version 4.7_1.1
Drupal Project Issue Tracking Module	Version 4.7_2.1
Drupal Project Issue Tracking Module	Version 5.0