Intrusion Prevention



This indicates an attack attempt to exploit a remote Code Execution vulnerability in the third-party Coder module for Drupal content
management system (CMS).
The vulnerability is due to improper user input validation in the application. A remote attacker can exploit this to execute arbitrary code in the security context of the target process via a crafted HTTP request.

Affected Products

Drupal Coder 7.x-1.x prior to 7.x-1.3
Drupal Coder 7.x-2.x prior to 7.x-2.6


System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the latest update from the vendor.

Other References