VULHUB ™

A vulnerability has been reported in Panels module for Drupal, which can be exploited by malicious users to compromise a vulnerable system. Certain unspecified input is not properly sanitised before being used in the import functionality. This can be exploited to execute arbitrary PHP code. Successful exploitation requires "create mini panels" permissions. The vulnerability is reported in versions prior to 6.x-3.4. Drupal Panels Module 6.x Update to version 6.x-3.4. SA-CONTRIB-2010-059: http://drupal.org/node/803952

A vulnerability has been reported in Panels module for Drupal, which can be exploited by malicious users to compromise a vulnerable system. Certain unspecified input is not properly sanitised before being used in the import functionality. This can be exploited to execute arbitrary PHP code. Successful exploitation requires "create mini panels" permissions. The vulnerability is reported in versions prior to 6.x-3.4. Drupal Panels Module 6.x Update to version 6.x-3.4. SA-CONTRIB-2010-059: http://drupal.org/node/803952