Lucene search
PRIOn knowledge basePRION:CVE-2012-1626HistorySep 20, 2012 - 3:46 a.m.
Sql injection
2012-09-2003:46:00
PRIOn knowledge base
www.prio-n.com
2
SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the “administer Date Tools” privilege to execute arbitrary SQL commands via unspecified vectors.
| CPE | Name | Operator | Version |
|---|---|---|---|
| date | eq | 6.x-2.0 rc4 | |
| date | eq | 6.x-2.0 rc2 | |
| date | eq | 6.x-2.0 beta4 | |
| date | eq | 6.x-2.0 rc3 | |
| date | eq | 6.x-2.0 beta2 | |
| date | eq | 6.x-2.0 rc5 | |
| date | eq | 6.x-2.0 rc6 | |
| date | eq | 6.x-2.0 beta | |
| date | eq | 6.x-2.0 beta3 | |
| date | eq | 6.120.20 |
Related
cvelist
cvelist
CVE-2012-1626
2012-09-20 01:00:00
nvd
nvd
CVE-2012-1626
2012-09-20 03:46:36
cve
cve
CVE-2012-1626
2012-09-20 03:46:36
drupal
drupal
SA-CONTRIB-2012-004 - Date - SQL injection
2012-01-11 00:00:00