CVE-2009-4296

The CVE describes an SQL injection vulnerability in Drupal’s Taxonomy Timer module, affecting 5.x-1.8 and earlier and 6.x-alpha1 and earlier. The root cause is an SQL injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The affected component is the Ta...