Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4553)

Description

Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP code via an external database server, related to "transient conditions."

Remediation

References

CVE-2012-4553

Related Vulnerabilities

Joomla! Core Security Bypass (1.6.0 - 3.9.24)

Dotclear Other Vulnerability (CVE-2005-3963)

MySQL CVE-2016-8284 Vulnerability (CVE-2016-8284)

PHP Other Vulnerability (CVE-2012-5381)

MySQL CVE-2021-2006 Vulnerability (CVE-2021-2006)

Severity

Medium

Classification

CVE-2012-4553 CWE-264