CVE-2008-3745

Published: Aug 27, 2008Modified: Apr 23, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes, delete files, and download unauthorized attachments via unspecified vectors.

Affected (5)

Products: Drupal: Drupal, Upload Module

Drupal

2 products

Drupal

Upload Module

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Drupal Drupal	Version 6.0
Drupal Drupal	Version 6.1
Drupal Drupal	Version 6.2
Drupal Drupal	Version 6.3
Drupal Upload Module	All versions

Related CWEs

CWE-264

References (16)

http://drupal.org/node/295053

Source: cve@mitre.org

Patch

http://secunia.com/advisories/31825

Source: cve@mitre.org

http://www.securityfocus.com/bid/30689

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2392

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=459108

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/44458

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html

Source: cve@mitre.org

http://drupal.org/node/295053