CVE-2012-5537

The Simplenews Scheduler module 6.x-2.x before 6.x-2.4 for Drupal allows remote authenticated users with the "send scheduled newsletters" permission to inject…

published December 3, 2012

CVSS
—
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

The Simplenews Scheduler module 6.x-2.x before 6.x-2.4 for Drupal allows remote authenticated users with the "send scheduled newsletters" permission to inject arbitrary PHP code into the scheduling form, which is later executed by cron.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01055 · 63.9th percentile
Published
2012-12-03T21:00Z
EPSS history
Timeline
  • 03 DEC 21:00Z
    The Simplenews Scheduler module 6.x-2.x before 6.x-2.4 for Drupal allows remote authenticated users with the "send scheduled newsletters" permission to inject…
    cvelistv5