Description

SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows remote attackers to execute arbitrary SQL commands via an SQL comment.

Remediation

References

CVE-2015-6659

Related Vulnerabilities

Django Improper Access Control Vulnerability (CVE-2016-2048)

WordPress Plugin WP?????? Cross-Site Scripting (1.3.9)

WordPress Plugin Block wp-login Cross-Site Request Forgery (1.3.0)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11823)

Moodle CVE-2019-3851 Vulnerability (CVE-2019-3851)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2015-6659