CVE-2007-0506

Published: Jan 26, 2007Modified: Apr 23, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123 module for Drupal allows remote authenticated users to bypass other access control modules and obtain attached files by guessing the filename, and obtain issue information via direct requests.

Affected (10)

Products: Drupal: Project, Project Issue Tracking Module

Drupal

2 products

Project

Project Issue Tracking Module

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Drupal Project	Version 4.6
Drupal Project	Version 4.6_1.1
Drupal Project	Version 4.7
Drupal Project	Version 4.7_1.1
Drupal Project	Version 4.7_2.1
Drupal Project	Version 5.0
Drupal Project Issue Tracking Module	Version 4.7
Drupal Project Issue Tracking Module	Version 4.7_1.1
Drupal Project Issue Tracking Module	Version 4.7_2.1
Drupal Project Issue Tracking Module	Version 5.0