CVE-2015-8761

The Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, which allows remote administrators with the "Import value sets" permission to execute arbitrary PHP code via the exported values list in a ctools import...

PT-2016-4006

Name of the Vulnerable Software and Affected Versions Drupal Values module version 7.x-1.x before 7.x-1.2 Description The issue concerns a permission checking problem in the Values module for Drupal. This allows remote administrators with the "Import value sets" permission to execute arbitrary PH...

Drupal Values Module Arbitrary PHP Code Execution Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Values is one of the modules used to customize various types of key-value pairs in the backend. An arbitrary PHP code execution vulnerability exists in the Drupal Values module in...