CVE-2015-4348

CVE-2015-4348 affects the Drupal Spider Contacts contributed module. The vulnerability is an SQL injection in the module that allows remote authenticated users possessing the "access Spider Contacts category administration" permission to execute arbitrary SQL via unspecified vectors. Root cause d...