Vulnerabilities (CVE)

Filtered by vendor Guy Bedford Subscribe
Filtered by product Live Css
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-0206 2 Drupal, Guy Bedford 2 Drupal, Live Css 2024-11-21 6.0 MEDIUM N/A
Unrestricted file upload vulnerability in the Live CSS module 6.x-2.x before 6.x-2.1 and 7.x-2.x before 7.x-2.7 for Drupal allows remote authenticated users with the "administer CSS" permissions to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.