← Back

CVE-2013-0224

nvd nist
Published: Mar 19, 2013Modified: Apr 29, 2026

JSON object

Loading...
4.4
Vector
AV:L/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 3.4 / Impact: 6.4
Source: NVD

Description

The Video module 7.x-2.x before 7.x-2.9 for Drupal, when using the FFmpeg transcoder, allows local users to execute arbitrary PHP code by modifying a temporary PHP file.

Affected (22)

Products: Video Project: Video
1 product
Video
Configuration A
22 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Video Project
Version 7.x-2.0 alpha1
Version 7.x-2.0 alpha2
Version 7.x-2.0 alpha3
Version 7.x-2.0 alpha4
Version 7.x-2.0 alpha5
Version 7.x-2.0 alpha6
Version 7.x-2.1 alpha1
Version 7.x-2.1 alpha2
Version 7.x-2.1 alpha3
Version 7.x-2.2
Version 7.x-2.2 beta1
Version 7.x-2.2 beta2
Version 7.x-2.2 beta3
Version 7.x-2.2 beta4
Version 7.x-2.2 beta5
Version 7.x-2.3
Version 7.x-2.4
Version 7.x-2.5
Version 7.x-2.6
Version 7.x-2.7
Version 7.x-2.8
Version 7.x-2.x dev
Running on/withPlatform Versions
Drupal
Drupal
All versions

Related CWEs

References (6)

Source: secalert@redhat.com
Patch
Source: secalert@redhat.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.