| Max CVSS | 6.0 | Min CVSS | 5.8 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2015-4349 | 5.8 |
Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors.
|
30-06-2015 - 13:16 | 15-06-2015 - 14:59 | |
| CVE-2015-4348 | 6.0 |
SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors.
|
30-06-2015 - 13:15 | 15-06-2015 - 14:59 |