CVE-2008-0569
Last modified
CVE-2008-0569 is a vulnerability of currently unknown severity. The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors.. EPSS estimates a 2.54% chance of exploitation in the next 30 days.
Description
The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Drupal | Comment Upload Module | 4.7 |
| Drupal | Comment Upload Module | 5.0 |
References
- http://secunia.com/advisories/28729Vendor Advisory
- http://secunia.com/advisories/28729Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-0569?
How severe is CVE-2008-0569?
How do I fix CVE-2008-0569?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-0563Cross-site request forgery (CSRF) vulnerability in service/i…
- CVE-2008-0564Multiple cross-site scripting (XSS) vulnerabilities in Mailm…
- CVE-2008-0565SQL injection vulnerability in vote.php in DeltaScripts PHP …
- CVE-2008-0566PHP remote file inclusion vulnerability in includes/smarty.p…
- CVE-2008-0567Multiple PHP remote file inclusion vulnerabilities in Chrono…
- CVE-2008-0568Unspecified vulnerability in the IP-authentication feature i…
- CVE-2008-0570The OpenID 5.x-1.0 and earlier module for Drupal does not pr…
- CVE-2008-0571The point moderation form in the Userpoints 4.7.x before 4.7…
- CVE-2008-0572Multiple PHP remote file inclusion vulnerabilities in Mindme…
- CVE-2008-0573IPSecDrv.sys 10.4.0.12 in SafeNET HighAssurance Remote and S…
- CVE-2008-0574Cross-site scripting (XSS) vulnerability in index.php in web…
- CVE-2008-0575Cross-site request forgery (CSRF) vulnerability in admin/adm…
Are you affected by CVE-2008-0569?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST