MacMusic  |  PcMusic  |  440 Software  |  440 Forums  |  440TV  |  Zicos
run
Search

Many websites threatened by highly critical code-execution bug in Drupal

Friday February 22, 2019. 02:50 AM , from Ars Technica
Enlarge (credit: Victorgrigas)
Sites that run the Drupal content management system run the risk of being hijacked until they're patched against a vulnerability that allows hackers to remotely execute malicious code, managers of the open source project warned Wednesday.
CVE-2019-6340, as the flaw is tracked, stems from a failure to sufficiently validate user input, managers said in an advisory. Hackers who exploited the vulnerability could, in some cases, run code of their choice on vulnerable websites. The flaw is rated highly critical.
'Some field types do not properly sanitize data from non-form sources,' the advisory stated. 'This can lead to arbitrary PHP code execution in some cases.'
Read 7 remaining paragraphs | Comments
https://arstechnica.com/?p=1462289
News copyright owned by their original publishers | Copyright © 2004 - 2024 Zicos / 440Network
Current Date
Mar, Fri 29 - 06:11 CET