NVD

Id
46754  
Name
CVE-2012-5653  
Description
The file upload feature in Drupal 6.x before 6.27 and 7.x before 7.18 allows remote authenticated users to bypass the protection mechanism and execute arbitrary PHP code via a null byte in a file name.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2013-01-02  
Modified Date
2016-09-21  
Seq
2012-5653  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234238 46754 CVE-2012-5653 http://drupal.org/SA-CORE-2012-004  View
234239 46754 CVE-2012-5653 http://drupalcode.org/project/drupal.git/commitdiff/b47f95d  View
234240 46754 CVE-2012-5653 http://drupalcode.org/project/drupal.git/commitdiff/da8023a  View
234241 46754 CVE-2012-5653 DSA-2776  View
234242 46754 CVE-2012-5653 [oss-security] 20121219 Re: CVE request for Drupal core, and contributed modules  View
234243 46754 CVE-2012-5653 56993  View
234244 46754 CVE-2012-5653 drupal-fileupload-code-execution(80795)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30151 JVNDB-2012-005858 Drupal のファイルアップロード機能における保護メカニズムを回避される脆弱性 Drupal のファイルアップロード機能には、保護メカニズムを回避され、任意の PHP コードを実行される脆弱性が存在します。 CVE-2012-5653 58891 CVE-2012-5653 46754 6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005858.html 2012-12-19 2013-01-07 View