• info
• discussion
• exploit
• solution
• references

Drupal Comment Upload Module Upload Validation Function Arbitrary File Upload Vulnerability

Solution:
The vendor released an update to address this issue. Please see the references for more information.


Drupal Comment Upload 4.7.x

• Drupal comment_upload-4.7.x-0.1.tar.gz
  http://ftp.drupal.org/files/projects/comment_upload-4.7.x-0.1.tar.gz

Drupal Comment Upload 5.x

• Drupal comment_upload-5.x-0.1.tar.gz
  http://ftp.drupal.org/files/projects/comment_upload-5.x-0.1.tar.gz