Approved changes feed: RSS · Atom

cpe:2.3:a:karen_stevenson:date:6.x-2.0:beta4:*:*:*:*:*:*

part: a version: 6.x-2.0 update: beta4

VendorKaren Stevenson (e3496f74-8c65-57a0-ae07-d5256b2278c5)
ProductDate (f03a4c44-7f52-5312-8956-1f7d9301c98a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/drupalprojects/date purl2cpe 2026-06-01 10:15:16.424367
pkg:github/vijaycs85/date purl2cpe 2026-06-01 10:15:16.424368

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1626 vulnerable 2026-06-08 05:00:50.007064 Details available
SQL injection vulnerability in the conversion form for Events in the Date module 6.x-2.x before 6.x-2.8 for Drupal allows remote authenticated users with the "administer Date Tools" privilege to execute arbitrary SQL commands via unspecified vectors.
Published: 2012-09-20T01:00:00.000Z
Updated: 2024-08-06T19:01:02.861Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.