CVE-2008-0569

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-02-05 · updated 2026-06-16
Weakness: CWE-264

Description

The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors.

Affected products

Drupal Comment Upload Module: 4.7, 5.0

References

http://drupal.org/node/216024
http://drupal.org/node/216035
http://drupal.org/node/216036
http://secunia.com/advisories/28729
http://www.securityfocus.com/bid/27544
http://www.vupen.com/english/advisories/2008/0374/references
http://drupal.org/node/216024
http://drupal.org/node/216035
http://drupal.org/node/216036
http://secunia.com/advisories/28729
http://www.securityfocus.com/bid/27544
http://www.vupen.com/english/advisories/2008/0374/references

Get alerted when CVE-2008-0569 or the next vulnerability affects your stack