CVE-2015-7877

Multiple SQL injection vulnerabilities in the User Dashboard module 7.x before 7.x-1.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-09-11

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• User Dashboard (User Dashboard Project)

References

• https://www.drupal.org/node/2572341
• https://www.drupal.org/node/2577901