Description
SQL injection vulnerability in the Taxonomy Timer module 5.x-1.8 and earlier and 6.x-alpha1 and earlier for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References (6)
Core 6
Core References
Patch, Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2009/3388
Patch, Vendor Advisory x_refsource_confirm
http://drupal.org/node/649396
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/37573
Patch x_refsource_confirm
http://drupal.org/node/641050
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/37189
Patch x_refsource_confirm
http://drupal.org/node/641064
Scores
EPSS
0.0126
EPSS Percentile
66.5%
Details
CWE
CWE-89
Status
published
Products (10)
brian_miller/taxonomy_timer
5.x-0.1
brian_miller/taxonomy_timer
5.x-1.0
brian_miller/taxonomy_timer
5.x-1.0beta1
brian_miller/taxonomy_timer
5.x-1.1
brian_miller/taxonomy_timer
5.x-1.2
brian_miller/taxonomy_timer
5.x-1.3
brian_miller/taxonomy_timer
5.x-1.4
brian_miller/taxonomy_timer
5.x-1.6
brian_miller/taxonomy_timer
5.x-1.7
brian_miller/taxonomy_timer
< 5.x-1.8
Published
Dec 11, 2009
Tracked Since
Feb 18, 2026