Description
The private filesystem in Drupal 5.x before 5.10 and 6.x before 6.4 trusts the MIME type sent by a web browser, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks by uploading files containing arbitrary web script or HTML.
Remediation
References
Related Vulnerabilities
MyBB Other Vulnerability (CVE-2007-1963)
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9855)
Jenkins CVE-2013-0158 Vulnerability (CVE-2013-0158)
Drupal Core 7.x Cross-Site Scripting (7.0 - 7.72)
WordPress Plugin Church Admin Arbitrary File Upload (1.2530)