CVE-2007-5596

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

The core Upload module in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 places the .html extension on a whitelist, which allows remote attackers to conduct cross-site scripting (XSS) attacks by uploading .html files.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://drupal.org/node/184320Patch, Vendor Advisory
http://secunia.com/advisories/27292Patch, Vendor Advisory
http://secunia.com/advisories/27352Third Party Advisory
http://www.securityfocus.com/bid/26119Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/3546Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/37274Third Party Advisory, VDB Entry
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.htmlThird Party Advisory
http://drupal.org/node/184320Patch, Vendor Advisory
http://secunia.com/advisories/27292Patch, Vendor Advisory
http://secunia.com/advisories/27352Third Party Advisory
http://www.securityfocus.com/bid/26119Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/3546Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/37274Third Party Advisory, VDB Entry
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.htmlThird Party Advisory

Timeline

Published: Oct 19, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-55974.3The hook_comments API in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 does not pass publication status, which might allow attackers to bypas CVE-2007-55984.3Cross-site scripting (XSS) vulnerability in Weblinks for Drupal 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.8 allows remote attackers to inj CVE-2007-55996.8Multiple PHP remote file inclusion vulnerabilities in awrate 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the toroo CVE-2007-56006.8Incomplete blacklist vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to execute arbitrary PHP code via a CVE-2007-56019.3Stack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer 10.5 and 11 beta, and earlier versions incl CVE-2007-560210.0Multiple stack-based buffer overflows in SwiftView Viewer before 8.3.5, as used by SwiftView and SwiftSend, allow remote attackers to execut CVE-2007-56039.3Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, al CVE-2007-56047.5Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support be CVE-2007-56059.3Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support b CVE-2007-560610.0Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support befo CVE-2007-56077.5Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Suppor CVE-2007-56089.3The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 all