CVE-2013-0206

Unrestricted file upload vulnerability in the Live CSS module 6.x-2.x before 6.x-2.1 and 7.x-2.x before 7.x-2.7 for Drupal allows remote authenticated users with the "administer CSS" permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a...

CVE-2013-0206

Unrestricted file upload vulnerability in the Live CSS module 6.x-2.x before 6.x-2.1 and 7.x-2.x before 7.x-2.7 for Drupal allows remote authenticated users with the "administer CSS" permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a...

CVE-2013-0206

The CVE-2013-0206 issue affects the Drupal contributed Live CSS module (versions 6.x-2.x before 6.x-2.1 and 7.x-2.x before 7.x-2.7). The root cause is an unrestricted file upload that allows remote authenticated users with the the administer CSS permission to upload a file with an executable exte...