Lucene search

K
cvelistRedhatCVELIST:CVE-2012-5537
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-5537

2022-10-0316:15:30
redhat
www.cve.org
2
drupal
simplenews scheduler
php code injection

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.9%

The Simplenews Scheduler module 6.x-2.x before 6.x-2.4 for Drupal allows remote authenticated users with the β€œsend scheduled newsletters” permission to inject arbitrary PHP code into the scheduling form, which is later executed by cron.

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.9%

Related for CVELIST:CVE-2012-5537