CVE

Id
55316  
CVE No.
CVE-2012-2073  
Status
Candidate  
Description
The Bundle copy module 7.x-1.x before 7.x-1.1 for Drupal does not check for the "use PHP for settings" permission while importing settings, which allows remote authenticated users with certain permissions to execute arbitrary PHP code via unspecified vectors.  
Phase
Assigned (20120404)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
577813 55316 CVE-2012-2073 MLIST:[oss-security] 20120406 CVE"s for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)  View
577814 55316 CVE-2012-2073 URL:http://www.openwall.com/lists/oss-security/2012/04/07/1  View
577815 55316 CVE-2012-2073 MISC:http://drupal.org/node/1506420  View
577816 55316 CVE-2012-2073 CONFIRM:http://drupal.org/node/1506166  View
577817 55316 CVE-2012-2073 CONFIRM:http://drupalcode.org/project/bundle_copy.git/commit/299bdca  View
577818 55316 CVE-2012-2073 BID:52811  View
577819 55316 CVE-2012-2073 URL:http://www.securityfocus.com/bid/52811  View
577820 55316 CVE-2012-2073 OSVDB:80676  View
577821 55316 CVE-2012-2073 URL:http://osvdb.org/80676  View
577822 55316 CVE-2012-2073 SECUNIA:48626  View
577823 55316 CVE-2012-2073 URL:http://secunia.com/advisories/48626  View
577824 55316 CVE-2012-2073 XF:bundlecopy-usephp-code-execution(74439)  View

Related JVN