Description
SQL injection vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_misc
http://drupal.org/node/1822066
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/11/20/4
Scores
EPSS
0.0113
EPSS Percentile
63.1%
Details
CWE
CWE-89
Status
published
Products (2)
carlos_carvalhar/time_spent
6.x-2.x
carlos_carvalhar/time_spent
7.x-2.x
Published
Dec 03, 2012
Tracked Since
Feb 18, 2026