Vulnerabilities > CVE-2006-2831 - Unspecified vulnerability in Drupal

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
drupal
nessus
NVD
Published: 2006-06-06
Updated: 2024-11-21

Summary

Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disabled within .htaccess, allows remote attackers to execute arbitrary code by uploading a file with multiple extensions, a variant of CVE-2006-2743.

Vulnerable Configurations

Part Description Count
Application
Drupal
11

Nessus

NASL familyDebian Local Security Checks
NASL idDEBIAN_DSA-1125.NASL
descriptionThe Drupal update in DSA 1125 contained a regression. This update corrects this flaw. For completeness, the original advisory text below : Several remote vulnerabilities have been discovered in the Drupal website platform, which may lead to the execution of arbitrary web script. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-2742 A SQL injection vulnerability has been discovered in the
last seen2020-06-01
modified2020-06-02
plugin id22667
published2006-10-14
reporterThis script is Copyright (C) 2006-2019 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/22667
titleDebian DSA-1125-2 : drupal - several vulnerabilities

References