Unscored CVE-2012-2306 EUVD-2012-2299GHSA-g4rv-c45g-4j68

SQL injection vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to execute arbitrary SQL comma…

Published Jul 25, 2012 · Updated Sep 16, 2024 · Assigned by redhat

Description

SQL injection vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

[oss-security] 20120502 Re: CVE Request for Drupal contributed modules mailing-list
[oss-security] 20120502 CVE Request for Drupal contributed modules mailing-list
http://drupal.org/node/1557868