CVE-2012-1626

SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer Date Tools" privilege to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-1626

SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer Date Tools" privilege to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-1626

CVE-2012-1626 affects the Drupal Date module (Date 6.x-2.x) prior to 6.x-2.8. The vulnerability is an SQL injection in the conversion form for Events, exploitable by remote authenticated users who have the "administer Date Tools" permission, via unspecified vectors. The root cause is an injection...