Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP code via an external database server, related to "transient conditions."
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:43
Type | Values Removed | Values Added |
---|---|---|
References | () http://drupal.org/node/1815904 - Patch | |
References | () http://drupal.org/node/1815912 - Patch, Vendor Advisory | |
References | () http://drupalcode.org/project/drupal.git/commit/b912710 - Patch | |
References | () http://www.openwall.com/lists/oss-security/2012/10/29/4 - | |
References | () http://www.openwall.com/lists/oss-security/2012/10/30/5 - |
Information
Published : 2012-11-11 13:00
Updated : 2024-11-21 01:43
NVD link : CVE-2012-4553
Mitre link : CVE-2012-4553
CVE.ORG link : CVE-2012-4553
JSON object : View
Products Affected
drupal
- drupal
CWE
CWE-264
Permissions, Privileges, and Access Controls