Vendor/product archive

carlos_carvalhar / time_spent CVEs

Beta · best-effort

3 CVEs tagged to carlos_carvalhar / time_spent — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to carlos_carvalhar vendor archive

CVE-2012-5550

Published Dec 3, 2012

SQL injection vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2012-5549

Published Dec 3, 2012

Cross-site request forgery (CSRF) vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to hijack the authentication of unspecified victims via unk…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2012-5548

Published Dec 3, 2012

Cross-site scripting (XSS) vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1