Lucene search

K
dsquareDsquare SecurityE-446
HistoryApr 22, 2015 - 12:00 a.m.

Drupal core 7.x SQL Injection

2015-04-2200:00:00
Dsquare Security
50

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.975 High

EPSS

Percentile

100.0%

SQL Injection vulnerabilty in the core SQL module of Drupal

Vulnerability Type: SQL Injection

For the exploit source code contact DSquare Security sales team.

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.975 High

EPSS

Percentile

100.0%