Comment Upload Module

DATE	CVE	VULNERABILITY TITLE	RISK
2008-02-05	CVE-2008-0569	Permissions, Privileges, and Access Controls vulnerability in Drupal Comment Upload Module 4.7/5.0 The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, which allows remote attackers to bypass upload validation, and upload arbitrary files and possibly execute arbitrary code, via unspecified vectors. network low complexity drupal CWE-264	6.4