Sql injection

2015-06-1514:59:00

PRIOn knowledge base

www.prio-n.com

8.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.2%

JSON

SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the “access Spider Contacts category administration” permission to execute arbitrary SQL commands via unspecified vectors.

References

www.openwall.com/lists/oss-security/2015/04/25/6

www.securityfocus.com/bid/72805

www.drupal.org/node/2437973