On some version ( less than 4.6.3 ) this could leads to execute some exploits even if posting comments is disabled.

CommentFileSizeAuthor
comment_18.patch640 byteskuba.zygmunt
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

magico’s picture

magico CreditAttribution: magico commented
Version: 4.6.3 » 4.6.9
Dries’s picture

Dries CreditAttribution: Dries commented

Committed to DRUPAL-4-6.

magico’s picture

magico CreditAttribution: magico commented
Status: Needs review » Fixed
Anonymous’s picture

(not verified) CreditAttribution: commented
Status: Fixed » Closed (fixed)