CVE-2007-0505

no score yetEPSS 2.9%

Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue.

EPSS: 2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
Published: 2007-01-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

drupal:project
drupal:project_issue_tracking_module

References

http://drupal.org/node/112146
http://osvdb.org/32134
http://secunia.com/advisories/23887
http://www.securityfocus.com/bid/22224
http://www.vupen.com/english/advisories/2007/0312

Check your stack JSON