CVE-2015-4348

2015-06-1514:00:00

mitre

www.cve.org

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

47.0%

JSON

SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the “access Spider Contacts category administration” permission to execute arbitrary SQL commands via unspecified vectors.

References

www.openwall.com/lists/oss-security/2015/04/25/6

www.securityfocus.com/bid/72805

www.drupal.org/node/2437973