Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-6065
cve-2012-6065
om maximenu
drupal
remote code execution
nvd
4.6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.6%
The OM Maximenu module 6.x-1.43 and earlier for Drupal, when the “Title has PHP” option is enabled, allows remote authenticated users with the “Administer OM Maximenu” permission to execute arbitrary PHP code via a “Link Title,” a different vulnerability than CVE-2012-5553.
Affected configurations
Node
daniel_honradeom_maximenuRange≤6.x-1.43
ORdaniel_honradeom_maximenuMatch6.x-1.0
ORdaniel_honradeom_maximenuMatch6.x-1.0rc1
ORdaniel_honradeom_maximenuMatch6.x-1.0rc2
ORdaniel_honradeom_maximenuMatch6.x-1.0rc3
ORdaniel_honradeom_maximenuMatch6.x-1.0rc4
ORdaniel_honradeom_maximenuMatch6.x-1.0rc5
ORdaniel_honradeom_maximenuMatch6.x-1.0rc6
ORdaniel_honradeom_maximenuMatch6.x-1.0rc7
ORdaniel_honradeom_maximenuMatch6.x-1.1
ORdaniel_honradeom_maximenuMatch6.x-1.2
ORdaniel_honradeom_maximenuMatch6.x-1.3
ORdaniel_honradeom_maximenuMatch6.x-1.4
ORdaniel_honradeom_maximenuMatch6.x-1.5
ORdaniel_honradeom_maximenuMatch6.x-1.6
ORdaniel_honradeom_maximenuMatch6.x-1.7
ORdaniel_honradeom_maximenuMatch6.x-1.8
ORdaniel_honradeom_maximenuMatch6.x-1.9
ORdaniel_honradeom_maximenuMatch6.x-1.10
ORdaniel_honradeom_maximenuMatch6.x-1.11
ORdaniel_honradeom_maximenuMatch6.x-1.12
ORdaniel_honradeom_maximenuMatch6.x-1.13
ORdaniel_honradeom_maximenuMatch6.x-1.14
ORdaniel_honradeom_maximenuMatch6.x-1.15
ORdaniel_honradeom_maximenuMatch6.x-1.16
ORdaniel_honradeom_maximenuMatch6.x-1.17
ORdaniel_honradeom_maximenuMatch6.x-1.18
ORdaniel_honradeom_maximenuMatch6.x-1.19
ORdaniel_honradeom_maximenuMatch6.x-1.20
ORdaniel_honradeom_maximenuMatch6.x-1.21
ORdaniel_honradeom_maximenuMatch6.x-1.22
ORdaniel_honradeom_maximenuMatch6.x-1.23
ORdaniel_honradeom_maximenuMatch6.x-1.24
ORdaniel_honradeom_maximenuMatch6.x-1.25
ORdaniel_honradeom_maximenuMatch6.x-1.26
ORdaniel_honradeom_maximenuMatch6.x-1.27
ORdaniel_honradeom_maximenuMatch6.x-1.28
ORdaniel_honradeom_maximenuMatch6.x-1.29
ORdaniel_honradeom_maximenuMatch6.x-1.30
ORdaniel_honradeom_maximenuMatch6.x-1.31
ORdaniel_honradeom_maximenuMatch6.x-1.32
ORdaniel_honradeom_maximenuMatch6.x-1.33
ORdaniel_honradeom_maximenuMatch6.x-1.34
ORdaniel_honradeom_maximenuMatch6.x-1.35
ORdaniel_honradeom_maximenuMatch6.x-1.36
ORdaniel_honradeom_maximenuMatch6.x-1.37
ORdaniel_honradeom_maximenuMatch6.x-1.38
ORdaniel_honradeom_maximenuMatch6.x-1.39
ORdaniel_honradeom_maximenuMatch6.x-1.40
ORdaniel_honradeom_maximenuMatch6.x-1.41
ORdaniel_honradeom_maximenuMatch6.x-1.42
ORdaniel_honradeom_maximenuMatch6.x-1.xdev
drupaldrupalMatch-
Related
prion
prion
Code injection
2012-12-03 21:55:00
Cross site scripting
2012-12-03 21:55:00
nvd
nvd
CVE-2012-6065
2012-12-03 21:55:03
CVE-2012-5553
2012-12-03 21:55:02
cvelist
cvelist
CVE-2012-6065
2022-10-03 16:15:28
CVE-2012-5553
2022-10-03 16:15:30
drupal
drupal
SA-CONTRIB-2012-160 - OM Maximenu - Cross Site Scripting (XSS)
2012-11-07 00:00:00
cve
cve
CVE-2012-5553
2022-10-03 16:15:30
4.6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.6%
Related for CVE-2012-6065