| Package | Affected versions | Patched versions |
|---|---|---|
| project | = 4.6= 4.6_1.1= 4.7= 4.7_1.1= 4.7_2.1= 5.0 | |
| project issue tracking module | = 4.7= 4.7_1.1= 4.7_2.1= 5.0 |
Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free