Description
An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names.
Remediation
References
Related Vulnerabilities
Python Incorrect Conversion between Numeric Types Vulnerability (CVE-2008-1721)
Python Other Vulnerability (CVE-2012-2135)
WordPress Other Vulnerability (CVE-2005-2108)
Oracle Application Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2001-1371)
Moodle Improper Privilege Management Vulnerability (CVE-2020-25699)