CVE-2012-5655

概要

参考情報

• drupal.org/node/1870550 · Patch
• drupalcode.org/project/context.git/commitdiff/4452bf1 · Exploit
• drupalcode.org/project/context.git/commitdiff/d8bf8b6 · Patch
• secunia.com/advisories/51517 · Vendor Advisory
• openwall.com/lists/oss-security/2012/12/20/1
• securityfocus.com/bid/56993

context のその他の脆弱性

• CVE-2013-4446中 6.8The _json_decode function in plugins/context_reaction_block.inc in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x before 7.x-3.0 for …
• CVE-2013-4445中 4.9The json rendering functionality in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x before 7.x-3.0 for Drupal uses Drupal's token sche…
• CVE-2010-1584低 2.1Cross-site scripting (XSS) vulnerability in the Context module before 6.x-2.0-rc4 for Drupal allows remote authenticated users, with Adminis…