CVE-2008-3001
Published Jul 3, 2008
Last updated 7 years ago
Overview
- Description
- The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute arbitrary code, via a crafted feed that allows upload of files with arbitrary extensions.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-94
Evaluator
- Comment
- -
- Impact
- Per Hyperlink Record 1026625, Drupal core is not affected. If you do not use the contributed Aggregation module, there is nothing you need to do.
- Solution
- Per Hyperlink Record 1026625, Drupal core is not affected. If you do not use the contributed Aggregation module, there is nothing you need to do.
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:drupal:aggregation_module:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CF7A917-F319-4C29-A843-99A36B4A83B5"
},
{
"criteria": "cpe:2.3:a:drupal:aggregation_module:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A64D861C-D011-4CE6-B7C6-EEB4D7CCDC81"
},
{
"criteria": "cpe:2.3:a:drupal:aggregation_module:3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CA6032D-27F3-4D80-8714-7F3ACA2E8836"
},
{
"criteria": "cpe:2.3:a:drupal:aggregation_module:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D6F71C3-0DCB-418A-8FD4-072D49CF9945"
},
{
"criteria": "cpe:2.3:a:drupal:aggregation_module:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F16FEA3A-265F-4332-A1A1-2879CA5682CC"
},
{
"criteria": "cpe:2.3:a:drupal:aggregation_module:4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C57C2C4F-F4EC-4A25-841D-8597EB1582B9"
},
{
"criteria": "cpe:2.3:a:drupal:aggregation_module:4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E8D028E-51F2-4BE9-99F3-85D1BE440FA7"
},
{
"criteria": "cpe:2.3:a:drupal:aggregation_module:5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35595D9F-0DBB-45BF-86A8-6548FFBB588D"
}
],
"operator": "OR"
}
]
}
]