CVE-2009-1034: SQL Injection
SQL injection vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via values in the URI.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1034?
CVE-2009-1034 is classified as a critical vulnerability due to its potential for remote exploitation via SQL injection.
How do I fix CVE-2009-1034?
To fix CVE-2009-1034, upgrade the Tasklist module to version 5.x-1.3 or 5.x-2.0-alpha1 or later.
What software is affected by CVE-2009-1034?
CVE-2009-1034 affects the Tasklist module for Drupal versions 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1.
What kind of attack can exploit CVE-2009-1034?
CVE-2009-1034 can be exploited by attackers to execute arbitrary SQL commands via maliciously crafted URI values.
Is there a workaround for CVE-2009-1034 if I cannot upgrade?
Currently, there are no recommended workarounds for CVE-2009-1034, and upgrading is the best course of action.