Description
An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names.
Remediation
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-2000-0770)
MySQL CVE-2019-2752 Vulnerability (CVE-2019-2752)
Envoy mishandles dropped and truncated datagrams Issue (CVE-2020-35471)
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-8393)
Zope Web Application Server Resource Management Errors Vulnerability (CVE-2008-5102)