CVE-2010-1546 - CVE House
Back to Database
Status published Medium CVE-2010-1546

Multiple eval injection vulnerabilities in the import functionality in the...

Vulnerability Description

Multiple eval injection vulnerabilities in the import functionality in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote authenticated users, with "administer page manager" privileges, to execute arbitrary PHP code via input to a text area, related to (1) the page_manager_page_import_subtask_validate function in page_manager/plugins/tasks/page.admin.inc and (2) the page_manager_handler_import_validate function in page_manager/page_manager.admin.inc.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-1546

Credits & Attribution

No credits recorded in the NVD database.

References

More from chaos tool suite project

View All →
CVE-2015-7875
ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal...
High 7.5
CVE-2015-4398
Open redirect vulnerability in the Chaos tool suite (ctools) module...
Medium 5.8
CVE-2015-4375
The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for...
Medium 4.3
CVE-2013-1925
The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for...
Low 3.5
CVE-2012-5559
Cross-site scripting (XSS) vulnerability in the page manager node view...
Low 2.6

Affected Vendor

chaos tool suite project

View all reports →

Affected Software

ctools
Vulnerable Versions:
6.x-1.0, 6.x-1.1, 6.x-1.2, 6.x-1.3, 6.x-1.x

Timeline

Official Publish: May 21st, 2010
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.