| Package | Affected versions | Patched versions |
|---|---|---|
| drupal | = 4.6= 4.6.0= 4.6.1= 4.6.2= 4.6.3= 4.6.4= 4.6.5= 4.6.6= 4.7.0 |
Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple extensions, which allows remote attackers to upload, modify, or execute arbitrary files in the files directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free