5

CVE-2012-1623

The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which might allow remote attackers to bypass intended registration restrictions.

Data is provided by the National Vulnerability Database (NVD)
Aidanlister ≫ Regcode Version <= 6.x-2.3
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-1.0
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-1.1
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-1.2
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-1.3
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-1.4
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-1.5
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-1.x Updatedev
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-2.0
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-2.0 Updatebeta1
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-2.0 Updatebeta2
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-2.0 Updatebeta3
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-2.0 Updatebeta4
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-2.0 Updatedev
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-2.1
   Drupal ≫ Drupal Version-
Aidanlister ≫ Regcode Version6.x-2.2
   Drupal ≫ Drupal Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.26% 0.466
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
http://drupal.org/node/1394172
Patch
Vendor Advisory