Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Karen Stevenson Component: Date Clear all filters
TI-2012-01415 CVE-2012-1626 · GHSA-8ffj-gcr2-r5wm

SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x…

Priority LOW 29

SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer Date Tools" privilege to execute arbitrary SQL com…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01105 Published 2012-09-20 No fix listed CWE-89
TI-2009-03001 CVE-2009-3156 · GHSA-9xfg-6whq-qvgm

Cross-site scripting (XSS) vulnerability in the Date Tools sub-module in the Date module…

Priority LOW 14

Cross-site scripting (XSS) vulnerability in the Date Tools sub-module in the Date module 6.x before 6.x-2.3 for Drupal allows remote authenticated users, with "use date tools" or "administer content types" privileges, to…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01261 Published 2009-09-10 No fix listed CWE-79