CVE-2012-5653

Published: Jan 3, 2013Modified: Apr 29, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

The file upload feature in Drupal 6.x before 6.27 and 7.x before 7.18 allows remote authenticated users to bypass the protection mechanism and execute arbitrary PHP code via a null byte in a file name.

Affected (72)

Products: Drupal: Drupal · Debian: Debian Linux

1 product

1 product

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Drupal Drupal	Version 7.0
Drupal Drupal	Version 7.0 alpha1
Drupal Drupal	Version 7.0 alpha2
Drupal Drupal	Version 7.0 alpha3
Drupal Drupal	Version 7.0 alpha4
Drupal Drupal	Version 7.0 alpha5
Drupal Drupal	Version 7.0 alpha6
Drupal Drupal	Version 7.0 alpha7
Drupal Drupal	Version 7.0 beta1
Drupal Drupal	Version 7.0 beta2
Drupal Drupal	Version 7.0 beta3
Drupal Drupal	Version 7.0 dev
Drupal Drupal	Version 7.0 rc1
Drupal Drupal	Version 7.0 rc2
Drupal Drupal	Version 7.0 rc3
Drupal Drupal	Version 7.0 rc4
Drupal Drupal	Version 7.10
Drupal Drupal	Version 7.11
Drupal Drupal	Version 7.12
Drupal Drupal	Version 7.13
Drupal Drupal	Version 7.14
Drupal Drupal	Version 7.15
Drupal Drupal	Version 7.16
Drupal Drupal	Version 7.17
Drupal Drupal	Version 7.1
Drupal Drupal	Version 7.2
Drupal Drupal	Version 7.3
Drupal Drupal	Version 7.4
Drupal Drupal	Version 7.5
Drupal Drupal	Version 7.6
Drupal Drupal	Version 7.7
Drupal Drupal	Version 7.8
Drupal Drupal	Version 7.9
Drupal Drupal	Version 7.x-dev

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 6.0
Debian Debian Linux	Version 7.0

Configuration C

36 vulnerable

Vulnerable Software	Affected Versions
Drupal Drupal	Version 6.0
Drupal Drupal	Version 6.0 beta1
Drupal Drupal	Version 6.0 beta2
Drupal Drupal	Version 6.0 beta3
Drupal Drupal	Version 6.0 beta4
Drupal Drupal	Version 6.0 dev
Drupal Drupal	Version 6.0 rc1
Drupal Drupal	Version 6.0 rc2
Drupal Drupal	Version 6.0 rc3
Drupal Drupal	Version 6.0 rc4
Drupal Drupal	Version 6.10
Drupal Drupal	Version 6.11
Drupal Drupal	Version 6.12
Drupal Drupal	Version 6.13
Drupal Drupal	Version 6.14
Drupal Drupal	Version 6.15
Drupal Drupal	Version 6.16
Drupal Drupal	Version 6.17
Drupal Drupal	Version 6.18
Drupal Drupal	Version 6.19
Drupal Drupal	Version 6.1
Drupal Drupal	Version 6.20
Drupal Drupal	Version 6.21
Drupal Drupal	Version 6.22
Drupal Drupal	Version 6.23
Drupal Drupal	Version 6.24
Drupal Drupal	Version 6.25
Drupal Drupal	Version 6.26
Drupal Drupal	Version 6.2
Drupal Drupal	Version 6.3
Drupal Drupal	Version 6.4
Drupal Drupal	Version 6.5
Drupal Drupal	Version 6.6
Drupal Drupal	Version 6.7
Drupal Drupal	Version 6.8
Drupal Drupal	Version 6.9