Debian Security Advisory DSA 1125-2 (drupal)

The remote host is missing an update to drupal announced via advisory DSA 1125-2. The Drupal update in DSA 1125 contained a regression. This update corrects this flaw. For completeness, the original advisory text below: Several remote vulnerabilities have been discovered in the Drupal web site...

DSA-1125 drupal - several

Bulletin has no description...

CVE-2006-2742

CVE-2006-2742 affects Drupal 4.6.x (before 4.6.7) and 4.7.0, with a SQL injection in the database interface. The vulnerability is exploitable via the count and from variables to database interface files (database.mysql.inc, database.pgsql.inc, database.mysqli.inc), allowing remote attackers to ex...