A weakness in the Drupal web content administration framework can be taken advantage of to permit subjective code execution, influencing very nearly 1,000,000 sites. ... As a relief, framework executives can arrange Drupal not to acknowledge these document types until the patches have been applied.