CVE-2013-0224

The Video module 7.x-2.x before 7.x-2.9 for Drupal, when using the FFmpeg transcoder, allows local users to execute arbitrary PHP code by modifying a temporary PHP file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.4 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 23.28%
Affected Products (NVD)
VendorProductVersion
video_projectvideo
7.x-2.0
video_projectvideo
7.x-2.1
video_projectvideo
7.x-2.2
video_projectvideo
7.x-2.3
video_projectvideo
7.x-2.4
video_projectvideo
7.x-2.5
video_projectvideo
7.x-2.6
video_projectvideo
7.x-2.7
video_projectvideo
7.x-2.8
video_projectvideo
7.x-2.x
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2013/01/25/4
https://drupal.org/node/1895234
https://drupal.org/node/1896714
http://www.openwall.com/lists/oss-security/2013/01/25/4
https://drupal.org/node/1895234
https://drupal.org/node/1896714