Description
SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."
Remediation
References
Related Vulnerabilities
WordPress 4.4.x Denial of Service Vulnerability (4.4 - 4.4.14)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0127)
Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.11)
TYPO3 CVE-2023-47126 Vulnerability (CVE-2023-47126)
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Cross-Site Scripting (1.5.22)