Read the docs
TI-2012-05029 Aliases CVE-2012-6065GHSA-x7v2-r3rp-hc39

The OM Maximenu module 6.x-1.43 and earlier for Drupal, when the "Title has PHP" option…

Priority LOW 23Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The OM Maximenu module 6.x-1.43 and earlier for Drupal, when the "Title has PHP" option is enabled, allows remote authenticated users with the "Administer OM Maximenu" permission to execute arbitrary PHP code via a "Link Title," a different vulnerability than CVE-2012-5553.

Why it matters now

EPSS 0.0105 64th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 53

CPEVersionsRoleVendor
cpe:2.3:a:daniel_honrade:om_maximenu:*:*:*:*:*:*:*:*up to 6.x-1.43VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:*:*:*:*:*:*:*6.x-1.0VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc1:*:*:*:*:*:*6.x-1.0 rc1VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc2:*:*:*:*:*:*6.x-1.0 rc2VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc3:*:*:*:*:*:*6.x-1.0 rc3VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc4:*:*:*:*:*:*6.x-1.0 rc4VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc5:*:*:*:*:*:*6.x-1.0 rc5VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc6:*:*:*:*:*:*6.x-1.0 rc6VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc7:*:*:*:*:*:*6.x-1.0 rc7VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.1:*:*:*:*:*:*:*6.x-1.1VulnerableDaniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:*:*:*:*:*:*:*:* Versions up to 6.x-1.43 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:*:*:*:*:*:*:* Versions 6.x-1.0 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc1:*:*:*:*:*:* Versions 6.x-1.0 rc1 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc2:*:*:*:*:*:* Versions 6.x-1.0 rc2 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc3:*:*:*:*:*:* Versions 6.x-1.0 rc3 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc4:*:*:*:*:*:* Versions 6.x-1.0 rc4 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc5:*:*:*:*:*:* Versions 6.x-1.0 rc5 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc6:*:*:*:*:*:* Versions 6.x-1.0 rc6 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.0:rc7:*:*:*:*:*:* Versions 6.x-1.0 rc7 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.1:*:*:*:*:*:*:* Versions 6.x-1.1 Vulnerable ·Daniel Honrade
Show 43 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.2:*:*:*:*:*:*:*6.x-1.2VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.3:*:*:*:*:*:*:*6.x-1.3VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.4:*:*:*:*:*:*:*6.x-1.4VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.5:*:*:*:*:*:*:*6.x-1.5VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.6:*:*:*:*:*:*:*6.x-1.6VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.7:*:*:*:*:*:*:*6.x-1.7VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.8:*:*:*:*:*:*:*6.x-1.8VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.9:*:*:*:*:*:*:*6.x-1.9VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.10:*:*:*:*:*:*:*6.x-1.10VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.11:*:*:*:*:*:*:*6.x-1.11VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.12:*:*:*:*:*:*:*6.x-1.12VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.13:*:*:*:*:*:*:*6.x-1.13VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.14:*:*:*:*:*:*:*6.x-1.14VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.15:*:*:*:*:*:*:*6.x-1.15VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.16:*:*:*:*:*:*:*6.x-1.16VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.17:*:*:*:*:*:*:*6.x-1.17VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.18:*:*:*:*:*:*:*6.x-1.18VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.19:*:*:*:*:*:*:*6.x-1.19VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.20:*:*:*:*:*:*:*6.x-1.20VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.21:*:*:*:*:*:*:*6.x-1.21VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.22:*:*:*:*:*:*:*6.x-1.22VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.23:*:*:*:*:*:*:*6.x-1.23VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.24:*:*:*:*:*:*:*6.x-1.24VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.25:*:*:*:*:*:*:*6.x-1.25VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.26:*:*:*:*:*:*:*6.x-1.26VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.27:*:*:*:*:*:*:*6.x-1.27VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.28:*:*:*:*:*:*:*6.x-1.28VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.29:*:*:*:*:*:*:*6.x-1.29VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.30:*:*:*:*:*:*:*6.x-1.30VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.31:*:*:*:*:*:*:*6.x-1.31VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.32:*:*:*:*:*:*:*6.x-1.32VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.33:*:*:*:*:*:*:*6.x-1.33VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.34:*:*:*:*:*:*:*6.x-1.34VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.35:*:*:*:*:*:*:*6.x-1.35VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.36:*:*:*:*:*:*:*6.x-1.36VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.37:*:*:*:*:*:*:*6.x-1.37VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.38:*:*:*:*:*:*:*6.x-1.38VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.39:*:*:*:*:*:*:*6.x-1.39VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.40:*:*:*:*:*:*:*6.x-1.40VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.41:*:*:*:*:*:*:*6.x-1.41VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.42:*:*:*:*:*:*:*6.x-1.42VulnerableDaniel Honrade
cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.x:dev:*:*:*:*:*:*6.x-1.x devVulnerableDaniel Honrade
cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*not specified by NVDRunning onDrupal
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.2:*:*:*:*:*:*:* Versions 6.x-1.2 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.3:*:*:*:*:*:*:* Versions 6.x-1.3 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.4:*:*:*:*:*:*:* Versions 6.x-1.4 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.5:*:*:*:*:*:*:* Versions 6.x-1.5 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.6:*:*:*:*:*:*:* Versions 6.x-1.6 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.7:*:*:*:*:*:*:* Versions 6.x-1.7 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.8:*:*:*:*:*:*:* Versions 6.x-1.8 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.9:*:*:*:*:*:*:* Versions 6.x-1.9 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.10:*:*:*:*:*:*:* Versions 6.x-1.10 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.11:*:*:*:*:*:*:* Versions 6.x-1.11 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.12:*:*:*:*:*:*:* Versions 6.x-1.12 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.13:*:*:*:*:*:*:* Versions 6.x-1.13 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.14:*:*:*:*:*:*:* Versions 6.x-1.14 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.15:*:*:*:*:*:*:* Versions 6.x-1.15 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.16:*:*:*:*:*:*:* Versions 6.x-1.16 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.17:*:*:*:*:*:*:* Versions 6.x-1.17 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.18:*:*:*:*:*:*:* Versions 6.x-1.18 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.19:*:*:*:*:*:*:* Versions 6.x-1.19 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.20:*:*:*:*:*:*:* Versions 6.x-1.20 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.21:*:*:*:*:*:*:* Versions 6.x-1.21 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.22:*:*:*:*:*:*:* Versions 6.x-1.22 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.23:*:*:*:*:*:*:* Versions 6.x-1.23 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.24:*:*:*:*:*:*:* Versions 6.x-1.24 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.25:*:*:*:*:*:*:* Versions 6.x-1.25 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.26:*:*:*:*:*:*:* Versions 6.x-1.26 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.27:*:*:*:*:*:*:* Versions 6.x-1.27 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.28:*:*:*:*:*:*:* Versions 6.x-1.28 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.29:*:*:*:*:*:*:* Versions 6.x-1.29 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.30:*:*:*:*:*:*:* Versions 6.x-1.30 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.31:*:*:*:*:*:*:* Versions 6.x-1.31 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.32:*:*:*:*:*:*:* Versions 6.x-1.32 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.33:*:*:*:*:*:*:* Versions 6.x-1.33 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.34:*:*:*:*:*:*:* Versions 6.x-1.34 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.35:*:*:*:*:*:*:* Versions 6.x-1.35 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.36:*:*:*:*:*:*:* Versions 6.x-1.36 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.37:*:*:*:*:*:*:* Versions 6.x-1.37 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.38:*:*:*:*:*:*:* Versions 6.x-1.38 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.39:*:*:*:*:*:*:* Versions 6.x-1.39 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.40:*:*:*:*:*:*:* Versions 6.x-1.40 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.41:*:*:*:*:*:*:* Versions 6.x-1.41 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.42:*:*:*:*:*:*:* Versions 6.x-1.42 Vulnerable ·Daniel Honrade
  • cpe:2.3:a:daniel_honrade:om_maximenu:6.x-1.x:dev:*:*:*:*:*:* Versions 6.x-1.x dev Vulnerable ·Daniel Honrade
  • cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Drupal

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-6065
  2. 2026-10-03 Alias added: GHSA-x7v2-r3rp-hc39

References

Patch 2

Other 1

  • TI-2012-04670 Multiple cross-site scripting (XSS) vulnerabilities in the OM Maximenu module 6.x-1.x… CVSS 2.0LOW 2.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences