The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes, delete files, and download unauthorized attachments via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| drupal / drupal | 6.0 | 6.0.x |
| drupal / drupal | 6.1 | 6.1.x |
| drupal / drupal | 6.2 | 6.2.x |
| drupal / drupal | 6.3 | 6.3.x |
| drupal / upload_module | - | - |