Description

SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and (c) database.mysqli.inc.

Remediation

References

CVE-2006-2742

Related Vulnerabilities

Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.8)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-25152)

WordPress Plugin Exquisite PayPal Donation Cross-Site Scripting (2.0.0)

WordPress Plugin PDF Viewer Block for Gutenberg Cross-Site Scripting (1.0)

OpenSSL Access of Resource Using Incompatible Type ('Type Confusion') Vulnerability (CVE-2023-0286)

Severity

High

Classification

CVE-2006-2742

Tags

Missing Update Known Vulnerabilities