Show filters
44 Total Results
Displaying 41-44 of 44
Sort by:
Attacker Value
Unknown
CVE-2012-5653
Disclosure Date: January 03, 2013 (last updated October 05, 2023)
The file upload feature in Drupal 6.x before 6.27 and 7.x before 7.18 allows remote authenticated users to bypass the protection mechanism and execute arbitrary PHP code via a null byte in a file name.
0
Attacker Value
Unknown
CVE-2012-5651
Disclosure Date: January 03, 2013 (last updated October 05, 2023)
Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results.
0
Attacker Value
Unknown
CVE-2012-4554
Disclosure Date: November 11, 2012 (last updated October 05, 2023)
The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE declaration in an XRDS file.
0
Attacker Value
Unknown
CVE-2012-4553
Disclosure Date: November 11, 2012 (last updated October 05, 2023)
Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP code via an external database server, related to "transient conditions."
0
