RedhatCVE-2013-0206CVE-2013-0206
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
87.6%
Unrestricted file upload vulnerability in the Live CSS module 6.x-2.x before 6.x-2.1 and 7.x-2.x before 7.x-2.7 for Drupal allows remote authenticated users with the “administer CSS” permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| guy_bedford | live_css | 6.x-2.0 | cpe:2.3:a:guy_bedford:live_css:6.x-2.0:*:*:*:*:*:*:* |
| guy_bedford | live_css | 7.x-2.0 | cpe:2.3:a:guy_bedford:live_css:7.x-2.0:*:*:*:*:*:*:* |
| guy_bedford | live_css | 7.x-2.0-beta1 | cpe:2.3:a:guy_bedford:live_css:7.x-2.0-beta1:*:*:*:*:*:*:* |
| guy_bedford | live_css | 7.x-2.1 | cpe:2.3:a:guy_bedford:live_css:7.x-2.1:*:*:*:*:*:*:* |
| guy_bedford | live_css | 7.x-2.2 | cpe:2.3:a:guy_bedford:live_css:7.x-2.2:*:*:*:*:*:*:* |
| guy_bedford | live_css | 7.x-2.3 | cpe:2.3:a:guy_bedford:live_css:7.x-2.3:*:*:*:*:*:*:* |
| guy_bedford | live_css | 7.x-2.4 | cpe:2.3:a:guy_bedford:live_css:7.x-2.4:*:*:*:*:*:*:* |
| guy_bedford | live_css | 7.x-2.5 | cpe:2.3:a:guy_bedford:live_css:7.x-2.5:*:*:*:*:*:*:* |
| guy_bedford | live_css | 7.x-2.6 | cpe:2.3:a:guy_bedford:live_css:7.x-2.6:*:*:*:*:*:*:* |
| guy_bedford | live_css | 7.x-2.x-dev | cpe:2.3:a:guy_bedford:live_css:7.x-2.x-dev:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
87.6%