Unscored CVE-2012-4553 EUVD-2012-4481GHSA-4vf7-r26x-78hg

Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP cod…

Published Nov 11, 2012 · Updated Sep 17, 2024 · Assigned by redhat

Description

Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP code via an external database server, related to "transient conditions."

References

http://drupalcode.org/project/drupal.git/commit/b912710
[oss-security] 20121029 CVE request: Drupal SA-CORE-2012-003 mailing-list
http://drupal.org/node/1815904
http://drupal.org/node/1815912
[oss-security] 20121029 Re: CVE request: Drupal SA-CORE-2012-003 mailing-list