Code Execution Vulnerability in CKEditor Module for Drupal
CVE-2012-2067

Currently unrated

Key Information:

Vendor

Ckeditor

Status
Fckeditor
Vendor
CVE Published:
5 September 2012

What is CVE-2012-2067?

A vulnerability exists in the CKEditor module for Drupal that allows remote authenticated users or attackers to execute arbitrary PHP code. This vulnerability is particularly concerning when the core PHP module is enabled, creating a pathway to potential compromise through the text parameter of a text filter. If left unaddressed, this flaw can lead to serious security threats, enabling unauthorized access and manipulation of system resources.

References

http://drupal.org/node/1482442
x_refsource_CONFIRM
http://www.osvdb.org/80080
vdb-entryx_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/74037
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.