Drupal : Security Vulnerabilities, CVEs, Published In 2008 (Code Execution) CVSS score >= 7
The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute arbitrary code, via a crafted feed that allows upload of files with arbitrary extensions.
Max CVSS
9.3
EPSS Score
3.73%
Published
2008-07-03
Updated
2017-08-08
Unspecified vulnerability in the Fileshare module for Drupal allows remote authenticated users with node-creation privileges to execute arbitrary code via unspecified vectors.
Max CVSS
8.5
EPSS Score
0.37%
Published
2008-01-15
Updated
2017-08-08
2 vulnerabilities found