Drupal Video Module arbitrary PHP Code Execution Vulnerability

Release date:
Updated on:

Affected Systems:
Drupal Video module
Description:
--------------------------------------------------------------------------------
Bugtraq id: 57525
 
Drupal is an open-source content management platform.
 
Drupal Video 7. Arbitrary PHP code execution vulnerability in the x-2.x module, which attackers can exploit to execute arbitrary PHP code in Web server context.
 
<* Source: Joris van Eijden

Link: http://drupal.org/node/1896714
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Drupal
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://drupal.org/project/video