CVE-2012-2067

CVE-2012-2067 describes an unspecified vulnerability in the CKeditor and CKEditor modules for Drupal, specifically affecting versions 6.x-2.x prior to 6.x-2.3, 6.x-1.x prior to 6.x-1.9, and 7.x-1.x prior to 7.x-1.7, when the core PHP module is enabled. This vulnerability allows remote authenticated users or remote attackers to execute arbitrary PHP code by manipulating the 'text' parameter within a text filter. With a CVSS score of 6.8, it is considered a medium-severity vulnerability, indicating potential for partial confidentiality, integrity, and availability impacts with a network attack vector and medium access complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.