drupal project issue tracking module 4.7 vulnerabilities and exploits

(subscribe to this query)

8.5

CVSSv2

Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 up to and including 5.x prior to 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue.

Drupal Project 4.7 1.1 Drupal Project 4.7 2.1 Drupal Project 4.6 1.1 Drupal Project 4.7 Drupal Project Issue Tracking Module 5.0 Drupal Project 5.0 Drupal Project Issue Tracking Module 4.7 Drupal Project 4.6 Drupal Project Issue Tracking Module 4.7 1.1 Drupal Project Issue Tracking Module 4.7 2.1

6

CVSSv2

The project_issue_access function in the Project issue tracking 4.7.0 up to and including 5.x prior to 20070123 module for Drupal allows remote authenticated users to bypass other access control modules and obtain attached files by guessing the filename, and obtain issue informat...

Drupal Project 4.6 Drupal Project 4.6 1.1 Drupal Project 4.7 Drupal Project Issue Tracking Module 5.0 Drupal Project Issue Tracking Module 4.7 1.1 Drupal Project Issue Tracking Module 4.7 2.1 Drupal Project 4.7 1.1 Drupal Project 4.7 2.1 Drupal Project 5.0 Drupal Project Issue Tracking Module 4.7

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the Project Issue Tracking module 5.x-2.x-dev prior to 20080130 in the 5.x-2.x series, 5.x-1.2 and previous versions in the 5.x-1.x series, 4.7.x-2.6 and previous versions in the 4.7.x-2.x series, and 4.7.x-1.6 and previous versions in ...

Drupal Project Issue Tracking Module 5 Drupal Project Issue Tracking Module 4.7

6.4

CVSSv2

The Project Issue Tracking module 5.x-2.x-dev prior to 20080130 in the 5.x-2.x series, 5.x-1.2 and previous versions in the 5.x-1.x series, 4.7.x-2.6 and previous versions in the 4.7.x-2.x series, and 4.7.x-1.6 and previous versions in the 4.7.x-1.x series for Drupal (1) does not...

Drupal Project Issue Tracking Module 4.7 Drupal Project Issue Tracking Module 5.0

5

CVSSv2

The Drupal Project module prior to 5.x-1.0, 4.7.x-2.3, and 4.7.x-1.3 and Project issue tracking module prior to 5.x-1.0, 4.7.x-2.4, and 4.7.x-1.4 do not properly enforce permissions, which allows remote malicious users to (1) obtain sensitive via the Tracker Module and the Recent...

Drupal Project Drupal Project Issue Tracking Module

3.5

CVSSv2

The Project issue tracking module prior to 4.7.x-1.3, 4.7.x-2.* prior to 4.7.x-2.3, and 5 prior to 5.x-0.2-beta for Drupal allows remote authenticated users, with "access project issues" permission, to read the contents of a private node via a URL with a modified node i...

Drupal Drupal Project Issue Tracking 4.7 1.2 Drupal Drupal Project Issue Tracking 4.7 2.0 Drupal Drupal Project Issue Tracking 4.7 2.1 Drupal Drupal Project Issue Tracking 4.7 2.2 Drupal Drupal Project Issue Tracking 4.7 1.0 Drupal Drupal Project Issue Tracking 5.0 0.1 Drupal Drupal Project Issue Tracking 5.7 1.1

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in the subscription functionality in the Project issue tracking module prior to 4.7.x-1.5, 4.7.x-2.x prior to 4.7.x-2.5, and 5.x-1.x prior to 5.x-1.1 for Drupal allows remote authenticated users with project create or edit permissions to i...

Drupal Drupal Project Issue Tracking 4.7 1.2 Drupal Drupal Project Issue Tracking 4.7 2.0 Drupal Drupal Project Issue Tracking 4.7 2.1 Drupal Drupal Project Issue Tracking 4.7 2.2 Drupal Drupal Project Issue Tracking 5.0 0.1 Drupal Drupal Project Issue Tracking 4.7 1.0

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook