Multiple Image Upload Module For Drupal Security Bypass Vulnerability
BID:41104
Info
Multiple Image Upload Module For Drupal Security Bypass Vulnerability
| Bugtraq ID: | 41104 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 23 2010 12:00AM |
| Updated: | Jun 23 2010 12:00AM |
| Credit: | Greg Knaddison of the Drupal Security Team |
| Vulnerable: |
Simon Rycroft Multiple Image Upload 0 |
| Not Vulnerable: | |
Discussion
Multiple Image Upload Module For Drupal Security Bypass Vulnerability
The Multiple Image Upload module for Drupal is prone to a security-bypass vulnerability that may allow attackers to perform actions without proper authorization.
Attackers can exploit this issue to bypass security restrictions to obtain sensitive information or perform unauthorized actions; this may aid in launching further attacks.
The Multiple Image Upload module for Drupal is prone to a security-bypass vulnerability that may allow attackers to perform actions without proper authorization.
Attackers can exploit this issue to bypass security restrictions to obtain sensitive information or perform unauthorized actions; this may aid in launching further attacks.
Exploit / POC
Multiple Image Upload Module For Drupal Security Bypass Vulnerability
Attackers can exploit this issue through a browser.
Attackers can exploit this issue through a browser.
Solution / Fix
Multiple Image Upload Module For Drupal Security Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
References
Multiple Image Upload Module For Drupal Security Bypass Vulnerability
References:
References: