high7.5
CVE-2009-4296
SQL injection vulnerability in the Taxonomy Timer module 5.x-1.8 and earlier and 6.x-alpha1 and earlier for Drupal allows remote attackers to execute arbitrary…
Impact
SQL injection vulnerability in the Taxonomy Timer module 5.x-1.8 and earlier and 6.x-alpha1 and earlier for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Brian Miller | Taxonomy Timer | through 5.x-1.8 through 6.x-1.0-alpha1 Versions 5.x-0.1, 5.x-1.0, 5.x-1.0beta1, 5.x-1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/641050
- http://drupal.org/node/641064
- http://drupal.org/node/649396
- http://secunia.com/advisories/37573
- http://www.securityfocus.com/bid/37189
- http://www.vupen.com/english/advisories/2009/3388
- http://drupal.org/node/641050
- http://drupal.org/node/641064
- http://drupal.org/node/649396
- http://secunia.com/advisories/37573
- http://www.securityfocus.com/bid/37189
- http://www.vupen.com/english/advisories/2009/3388