Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:project_issue_tracking_module:5.0:*:dev:*:*:*:*:*

part: a version: 5.0 update: *

VendorDrupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de)
ProductProject Issue Tracking Module (ba3739cf-a7d3-50a8-b92a-d5880ed10b77)
Editiondev
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/br3nda/drupal-module-project_issue purl2cpe 2026-06-01 10:11:36.407067

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-0506 vulnerable 2026-06-08 04:49:32.650789 Details available
The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123 module for Drupal allows remote authenticated users to bypass other access control modules and obtain attached files by guessing the filename, and obtain issue information via direct requests.
Published: 2007-01-26T00:00:00.000Z
Updated: 2024-08-07T12:19:30.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0505 vulnerable 2026-06-08 04:49:32.650142 Details available
Unrestricted file upload vulnerability in the Project issue tracking 4.7.0 through 5.x before 20070123, a module for Drupal, allows remote authenticated users to execute arbitrary code by attaching a file with executable or multiple extensions to a project issue.
Published: 2007-01-26T00:00:00.000Z
Updated: 2024-08-07T12:19:30.176Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.