← Back

Bundle Copy

bundle_copy

Vendor: Kristof De Jaeger • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Kristof De Jaeger
1Bundle Copy
Apr 29, 2026
Aug 14, 2012
N/A· v4
N/A· v3
6.0 MEDIUM· v2
The Bundle copy module 7.x-1.x before 7.x-1.1 for Drupal does not check for the "use PHP for settings" permission while importing settings, which allows remote authenticated users with certain permissions to execute arbi...Show more
The Bundle copy module 7.x-1.x before 7.x-1.1 for Drupal does not check for the "use PHP for settings" permission while importing settings, which allows remote authenticated users with certain permissions to execute arbitrary PHP code via unspecified vectors.Show less