← Back

Spider Contacts

spider_contacts

Vendor: Spider Contacts Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-4349
1Spider Contacts Project
1Spider Contacts
May 6, 2026
Jun 15, 2015
N/A· v4
N/A· v3
5.8 MEDIUM· v2
Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified...Show more
Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors.Show less
CVE-2015-4348
1Spider Contacts Project
1Spider Contacts
May 6, 2026
Jun 15, 2015
N/A· v4
N/A· v3
6.0 MEDIUM· v2
SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecifie...Show more
SQL injection vulnerability in the Spider Contacts module for Drupal allows remote authenticated users with the "access Spider Contacts category administration" permission to execute arbitrary SQL commands via unspecified vectors.Show less