Show filters
42 Total Results
Displaying 41-42 of 42
Sort by:
Attacker Value
Unknown
CVE-2012-5653
Disclosure Date: January 03, 2013 (last updated October 05, 2023)
The file upload feature in Drupal 6.x before 6.27 and 7.x before 7.18 allows remote authenticated users to bypass the protection mechanism and execute arbitrary PHP code via a null byte in a file name.
0
Attacker Value
Unknown
CVE-2012-5651
Disclosure Date: January 03, 2013 (last updated October 05, 2023)
Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results.
0
