CVE:CVE-2013-0224
CNNVD:CNNVD-201301-497
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。
Drupal平台下的Video模块7.x-2.9之前的7.x-2.x版本中存在漏洞。在使用Ffmpeg转码器的情况下，本地攻击者可通过修改临时PHP文件从而利用该漏洞执行任意PHP代码。
solution:Upgrade video_project video to a higher version than 7.x-2.0:alpha1,7.x-2.0:alpha2,7.x-2.0:alpha3,7.x-2.0:alpha4,7.x-2.0:alpha5,7.x-2.0:alpha6,7.x-2.1:alpha1,7.x-2.1:alpha2,7.x-2.1:alpha3,7.x-2.2,7.x-2.2:beta1,7.x-2.2:beta2,7.x-2.2:beta3,7.x-2.2:beta4,7.x-2.2:beta5,7.x-2.3,7.x-2.4,7.x-2.5,7.x-2.6,7.x-2.7,7.x-2.8,7.x-2.x:dev,and avoid the version 7.x-2.0:alpha1,7.x-2.0:alpha2,7.x-2.0:alpha3,7.x-2.0:alpha4,7.x-2.0:alpha5,7.x-2.0:alpha6,7.x-2.1:alpha1,7.x-2.1:alpha2,7.x-2.1:alpha3,7.x-2.2,7.x-2.2:beta1,7.x-2.2:beta2,7.x-2.2:beta3,7.x-2.2:beta4,7.x-2.2:beta5,7.x-2.3,7.x-2.4,7.x-2.5,7.x-2.6,7.x-2.7,7.x-2.8,7.x-2.x:dev