CVE

CVE-2018-9205

7.5

CVSS

Description

Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.

Attack Vector

Privileges Req.

User Interaction

avatar_uploader

Updated Sep 28, 2026View on NVD →

S4E scanner

CVE-2018-9205 Scanner

CVE-2018-9205 scanner - Arbitrary File Disclosure vulnerability in Drupal Avatar Uploader

Used 2.1k times · 5.9k assets checked · url

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.