Read the docs

Spider Contacts Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Spider Contacts Project records in CISA KEV

No Spider Contacts Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Spider Contacts 2 records LOW

Records

2 records in Spider Contacts · all components

TI-2015-03646 CVE-2015-4348 · GHSA-3672-p885-v7rv

SQL injection vulnerability in the Spider Contacts module for Drupal allows remote…

Priority LOW 29

SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecifie…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00967 Published 2015-06-15 No fix listed CWE-89
TI-2015-03647 CVE-2015-4349 · GHSA-8c6w-p9fg-6fwf

Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal…

Priority LOW 27

Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.00636 Published 2015-06-15 No fix listed CWE-352
Open these records in search →