Description
Drupal 7.x before 7.16 allows remote attackers to obtain sensitive information and possibly re-install Drupal and execute arbitrary PHP code via an external database server, related to "transient conditions."
Remediation
References
Related Vulnerabilities
ownCloud Other Vulnerability (CVE-2015-5954)
WordPress Plugin Location Weather Cross-Site Scripting (1.3.3)
WordPress Plugin Gravity Forms FreshDesk Cross-Site Scripting (1.2.8)
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-6417)
WordPress Plugin GS Insever Portfolio Cross-Site Scripting (1.4.4)