CVE-2011-2715
CVE-2011-2715
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names.
CVSS 9.8 · Critical · EPSS 1.1%
- Published
- Updated
Stack: php
Affected products and versions
data-module
- Versions
- 6.x-1.0-alpha14: Affected
No fix published
drupal/core Packagist
- Versions
- 6.20
No fix published