Approved changes feed: RSS · Atom

cpe:2.3:a:values_project:values:7.x-1.0:rc4:*:*:*:drupal:*:*

part: a version: 7.x-1.0 update: rc4

VendorValues Project (a08db0fa-0439-56ad-a964-3b5ebd184f64)
ProductValues (4383b215-9096-5e92-83f0-2dd7f2142a7d)
Edition*
Language*
Software edition*
Target softwaredrupal
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-8761 vulnerable 2026-06-08 05:07:04.857764 Details available
The Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, which allows remote administrators with the "Import value sets" permission to execute arbitrary PHP code via the exported values list in a ctools import.
Published: 2016-01-08T19:00:00.000Z
Updated: 2024-09-16T22:14:18.500Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.