CVE Catalog
CVE-2015-7877
CriticalSummary
Multiple SQL injection vulnerabilities in the User Dashboard module 7.x before 7.x-1.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
Risk Assessment
Attackers may exploit these vulnerabilities to gain unauthorized access to the database, potentially leading to data theft or system compromise.
Recommendation
It is recommended to update the User Dashboard module to version 7.x-1.4 or later to mitigate these vulnerabilities.
Original NVD description (English source)
Multiple SQL injection vulnerabilities in the User Dashboard module 7.x before 7.x-1.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors.