CVE-2007-0505

{"id": "CVE-2007-0505", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 8.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-01-26T00:28:00.000", "references": [{"url": "http://drupal.org/node/112146", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/32134", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/23887", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22224", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/0312", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31729", "source": "cve@mitre.org"}, {"url": "http://drupal.org/node/112146", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/32134", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/23887", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/22224", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/0312", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31729", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue."}, {"lang": "es", "value": "Vulnerabilidad de promoci\u00f3n de ficheros sin restricciones en el seguimiento de asuntos de Project 4.7.0 hasta 5.x versiones anteriores a 20070123, m\u00f3dulo para Drupal, permite a usuarios remotos autenticados ejecutar c\u00f3digo de su elecci\u00f3n ajuntando un archivo ejecutable o con m\u00faltiples extensiones a un asunto de proyecto."}], "lastModified": "2024-11-21T00:26:02.187", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:drupal:project:4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FAD68C3C-298C-41C6-BC6E-D25EBCDAA11D"}, {"criteria": "cpe:2.3:a:drupal:project:4.6_1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDC8AB64-19E1-4F38-994F-971E1B6268F4"}, {"criteria": "cpe:2.3:a:drupal:project:4.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E105AA85-FA71-45D1-A7A2-6C07FFEA452D"}, {"criteria": "cpe:2.3:a:drupal:project:4.7_1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE28E558-D90C-49E8-A472-7A37FBB49F4C"}, {"criteria": "cpe:2.3:a:drupal:project:4.7_2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBE32A77-7098-4E5B-8B85-E6B8930D1FAC"}, {"criteria": "cpe:2.3:a:drupal:project:5.0:*:dev:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6D3BE9B-7223-403A-90F4-39AE94DE7EB2"}, {"criteria": "cpe:2.3:a:drupal:project_issue_tracking_module:4.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80E74B2F-1EB1-462D-B970-339C8817C229"}, {"criteria": "cpe:2.3:a:drupal:project_issue_tracking_module:4.7_1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7813534-EA9B-4A5E-B84E-D0D353EE9719"}, {"criteria": "cpe:2.3:a:drupal:project_issue_tracking_module:4.7_2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41B5AE16-B0D6-4E65-86BF-82EA5CD6F1B5"}, {"criteria": "cpe:2.3:a:drupal:project_issue_tracking_module:5.0:*:dev:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A79A0F8-29F0-4393-8A44-83E804BC38EE"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}