VendorsKaren Stevensondate6.x-2.3
Vulnerabilities

Karen Stevenson Date Module 6.x-2.3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1CVEs
CVE-2012-1626
SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer Date Tools" privilege to execute arbitrary SQL commands via unspecified vectors.
Published 2012-09-20 · Modified
6.0EPSS 0.011