CVE-2007-0505

Severity: high (CVSS 8.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-01-26 · updated 2026-06-16

Description

Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue.

Affected products

Drupal Project: 4.6, 4.6_1.1, 4.7, 4.7_1.1, 4.7_2.1, 5.0
Drupal Project Issue Tracking Module: 4.7, 4.7_1.1, 4.7_2.1, 5.0

References

http://drupal.org/node/112146
http://osvdb.org/32134
http://secunia.com/advisories/23887
http://www.securityfocus.com/bid/22224
http://www.vupen.com/english/advisories/2007/0312
https://exchange.xforce.ibmcloud.com/vulnerabilities/31729
http://drupal.org/node/112146
http://osvdb.org/32134
http://secunia.com/advisories/23887
http://www.securityfocus.com/bid/22224
http://www.vupen.com/english/advisories/2007/0312
https://exchange.xforce.ibmcloud.com/vulnerabilities/31729

Get alerted when CVE-2007-0505 or the next vulnerability affects your stack