Drupal arbitrary PHP code execution and Information Leakage Vulnerability

Release date:
Updated on:

Affected Systems:
Drupal 7.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 56103

Drupal is an open source content management platform.

Drupal 7.16 and earlier versions have security vulnerabilities. Attackers can exploit these vulnerabilities to execute arbitrary PHP code and obtain sensitive information in the context of the Web server.

<* Source: Heine Deelstra
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Drupal
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://drupal.org/node/