Services Project : Security Vulnerabilities, CVEs, Published In 2015 (Code Execution)

CVE-2015-4393

The resource/endpoint for uploading files in the Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote authenticated users with the "Save file information" permission to execute arbitrary code via a crafted filename.
Max CVSS
6.0
EPSS Score
0.80%
Published
2015-06-15
Updated
2016-06-09
1 vulnerabilities found
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close