Description
The Janrain Engage (formerly RPX) module 6.x-1.3 for Drupal does not validate the file for a profile image, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks and possibly execute arbitrary PHP code by causing a crafted avatar to be downloaded from an external login provider site.
References
- janrain-unspecified-xss(64847) vdb-entry
- janrain-file-upload(64848) vdb-entry
- http://drupal.org/node/1033154
- 45926 vdb-entry
- 42980 third-party-advisory
- 70623 vdb-entry