CVE-2012-6065 | BDVDB-2026-53734 Detail

Description#

The OM Maximenu module 6.x-1.43 and earlier for Drupal, when the "Title has PHP" option is enabled, allows remote authenticated users with the "Administer OM Maximenu" permission to execute arbitrary PHP code via a "Link Title," a different vulnerability than CVE-2012-5553.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://drupal.org/node/1834048
http://drupal.org/node/1834046
http://www.madirish.net/551

Exploit#

No public exploit known

History#

Version 12012-12-03Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.