CVE-2006-7109: Medium severity Drupal Imce Module vulnerability
Published Mar 5, 2007
·Updated
Unrestricted file upload vulnerability in IMCE before 1.6, a Drupal module, allows remote authenticated users to upload arbitrary PHP code via a filename with a double extension such as .php.gif.
Affected Software
1 affected component
Drupal Imce Module<=1.5
Remediation
Patch Available
Patch Available
Event History
Mar 5, 2007
CVE Published
08:19 PM
Mar 6, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-7109?
CVE-2006-7109 is classified as a high severity vulnerability due to the risk of arbitrary code execution.
2
How do I fix CVE-2006-7109?
To fix CVE-2006-7109, upgrade the IMCE module to version 1.6 or later.
3
What types of files can be uploaded due to CVE-2006-7109?
CVE-2006-7109 allows the upload of arbitrary PHP code via files with double extensions, such as .php.gif.
4
Who is affected by CVE-2006-7109?
CVE-2006-7109 affects remote authenticated users of the IMCE module in Drupal versions before 1.6.
5
What impact does CVE-2006-7109 have on web security?
CVE-2006-7109 can lead to remote code execution, posing a significant risk to web server integrity and security.