Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Drupal IMCE Module Arbitrary File Deletion Vulnerability

The Drupal IMCE module is prone to an arbitrary file-deletion vulnerability because the application fails to sufficiently sanitize user-supplied input.

Successfully exploiting this issue allows attackers to delete arbitrary files with the privileges of the targeted webserver process.







 

Privacy Statement
Copyright 2009, SecurityFocus