CVE

Id
55544  
CVE No.
CVE-2012-2301  
Status
Candidate  
Description
The Ubercart module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer product classes" permission to execute arbitrary PHP code via unspecified vectors.  
Phase
Assigned (20120419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579513 55544 CVE-2012-2301 MLIST:[oss-security] 20120502 CVE Request for Drupal contributed modules  View
579514 55544 CVE-2012-2301 URL:http://www.openwall.com/lists/oss-security/2012/05/03/1  View
579515 55544 CVE-2012-2301 MLIST:[oss-security] 20120502 Re: CVE Request for Drupal contributed modules  View
579516 55544 CVE-2012-2301 URL:http://www.openwall.com/lists/oss-security/2012/05/03/2  View
579517 55544 CVE-2012-2301 MISC:http://drupal.org/node/1547506  View
579518 55544 CVE-2012-2301 MISC:http://drupal.org/node/1547508  View
579519 55544 CVE-2012-2301 MISC:http://drupal.org/node/1547674  View
579520 55544 CVE-2012-2301 BID:53251  View
579521 55544 CVE-2012-2301 URL:http://www.securityfocus.com/bid/53251  View
579522 55544 CVE-2012-2301 SECUNIA:48935  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27689 JVNDB-2012-003396 Drupal 用の Addressbook モジュールにおける SQL インジェクションの脆弱性 Drupal 用の Addressbook モジュールには、SQL インジェクションの脆弱性が存在します。 CVE-2012-2306 55544 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003396.html  View