CVE-2012-5550

SQL injection vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-5550

Summary: CVE-2012-5550 describes a SQL injection vulnerability in the Drupal contributed Time Spent module (versions 6.x and 7.x). The underlying issue is that the module does not sufficiently sanitize user input, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors...