QwikSec

Security Database

CVE

CWE

Training

CVE-2012-2067

Published: Sep 5, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

Unspecified vulnerability in the CKeditor module 6.x-2.x before 6.x-2.3 and the CKEditor module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.7 for Drupal, when the core PHP module is enabled, allows remote authenticated users or remote attackers to execute arbitrary PHP code via the text parameter to a text filter. NOTE: some of these details are obtained from third party information.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://drupal.org/node/1482442

x_refsource_CONFIRM

vdb-entry

x_refsource_OSVDB

ckeditor-drupal-code-execution(74037)

vdb-entry

x_refsource_XF

http://drupal.org/node/1482480

x_refsource_CONFIRM

[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)

mailing-list

x_refsource_MLIST

http://drupal.org/node/1482466

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

http://drupal.org/node/1482528

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.