Karen Stevenson
1 CVEs
vendor
Monthly
SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer Date Tools" privilege to. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable.
SQLi
Date
Karen Stevenson
NVD
CVSS 2.0
6.0
EPSS
0.6%
EPSS 1%
CVSS 6.0
MEDIUM
PATCH
This Month
SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer Date Tools" privilege to. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable.
SQLi
Date
Karen Stevenson
NVD