CVE-2012-5653

MediumCVSS 6.0/10Last modified Jun 16, 2026

Description

The file upload feature in Drupal 6.x before 6.27 and 7.x before 7.18 allows remote authenticated users to bypass the protection mechanism and execute arbitrary PHP code via a null byte in a file name.

Metrics

CVSS 2.0 6.0/10AV:N/AC:M/Au:S/C:P/I:P/A:P

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://drupal.org/SA-CORE-2012-004Patch, Vendor Advisory
http://drupalcode.org/project/drupal.git/commitdiff/b47f95dExploit, Patch
http://drupalcode.org/project/drupal.git/commitdiff/da8023aExploit, Patch
http://osvdb.org/88529Broken Link
http://www.debian.org/security/2013/dsa-2776Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:074Broken Link
http://www.openwall.com/lists/oss-security/2012/12/20/1Third Party Advisory
http://www.securityfocus.com/bid/56993Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80795
http://drupal.org/SA-CORE-2012-004Patch, Vendor Advisory
http://drupalcode.org/project/drupal.git/commitdiff/b47f95dExploit, Patch
http://drupalcode.org/project/drupal.git/commitdiff/da8023aExploit, Patch
http://osvdb.org/88529Broken Link
http://www.debian.org/security/2013/dsa-2776Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2013:074Broken Link
http://www.openwall.com/lists/oss-security/2012/12/20/1Third Party Advisory
http://www.securityfocus.com/bid/56993Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80795

Timeline

Published: Jan 3, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-56544.3The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node tex CVE-2012-56555.0The Context module 6.x-3.x before 6.x-3.1 and 7.x-3.x before 7.x-3.0-beta6 for Drupal does not properly restrict access to block content, wh CVE-2012-56565.5The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an CVE-2012-56575.0The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow rem CVE-2012-56582.1rhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the password and other sensitive information in cle CVE-2012-56593.7Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 an CVE-2012-56606.9abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions CVE-2012-56625.8x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName f CVE-2012-56637.5The isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create insecure temporary files into a publicly-writ CVE-2012-56654.3ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings.php, which allows remote attackers to edit CVE-2012-56664.3Cross-site scripting (XSS) vulnerability in bookmarks/js/bookmarks.js in ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 allows remote a CVE-2012-56674.4Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via vectors involving a