Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

drupal7: code execution

Package(s):

drupal7

CVE #(s):

Created:

October 29, 2012

Updated:

October 31, 2012

Description:

From the Drupal advisory:

A bug in the installer code was identified that allows an attacker to re-install Drupal using an external database server under certain transient conditions. This could allow the attacker to execute arbitrary PHP code on the original server.

Alerts:

Fedora	FEDORA-2012-16442	2012-10-28
Fedora	FEDORA-2012-16421	2012-10-28

(Log in to post comments)