Description
SQL injection vulnerability in the Taxonomy Timer module 5.x-1.8 and earlier and 6.x-alpha1 and earlier for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References
- ADV-2009-3388 vdb-entry
- http://drupal.org/node/649396
- 37573 third-party-advisory
- http://drupal.org/node/641050
- 37189 vdb-entry
- http://drupal.org/node/641064