CVE-2011-2715

2020-01-1421:22:54

redhat

www.cve.org

AI Score

9.9

Confidence

High

EPSS

0.002

Percentile

51.6%

JSON

An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names.

CNA Affected

[
  {
    "product": "Data-module",
    "vendor": "Drupal",
    "versions": [
      {
        "status": "affected",
        "version": "6.x-1.0-alpha14"
      }
    ]
  }
]

References

www.drupal.org/node/1056470

www.openwall.com/lists/oss-security/2011/07/26/8