CVE-2008-4789
The validation functionality in the core upload module in Drupal 6.x before 6.5 allows remote authenticated users to bypass intended access restrictions and "attach files to con…
Published: 2008-10-29 · CVSS: Unscored
The validation functionality in the core upload module in Drupal 6.x before 6.5 allows remote authenticated users to bypass intended access restrictions and "attach files to content," related to a "logic error."
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7