CVE-2009-4296: SQL Injection
SQL injection vulnerability in the Taxonomy Timer module 5.x-1.8 and earlier and 6.x-alpha1 and earlier for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4296?
CVE-2009-4296 is considered a high severity SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2009-4296?
To fix CVE-2009-4296, update the Taxonomy Timer module to version 5.x-1.9 or later for Drupal 5 and 6.x-1.1 or later for Drupal 6.
Which versions of Taxonomy Timer are affected by CVE-2009-4296?
CVE-2009-4296 affects Taxonomy Timer versions 5.x-1.8 and earlier as well as 6.x-alpha1 and earlier.
Can I still use Taxonomy Timer if I've upgraded to the latest version regarding CVE-2009-4296?
Yes, if you upgrade to a version that is not affected, such as 5.x-1.9 or 6.x-1.1, you can safely use the Taxonomy Timer module.
What type of attacks does CVE-2009-4296 enable?
CVE-2009-4296 enables attackers to carry out SQL injection attacks, potentially leading to unauthorized access to the database.