CVE-2012-2073

Name of the Vulnerable Software and Affected Versions Drupal Bundle copy module versions 7.x-1.x before 7.x-1.1

Description The issue allows remote authenticated users with certain permissions to execute arbitrary PHP code. This is due to the module not checking for the use PHP for settings permission while importing settings.

Recommendations For versions prior to 7.x-1.1, update to version 7.x-1.1 or later to resolve the issue.