CVE-2012-2718

CVE-2012-2718 affects the contributed Drupal Counter module (all versions). The root cause is insufficient filtering of user-supplied text when recording visits, allowing a remote attacker to inject SQL commands via that data. Impact is arbitrary SQL execution through the Counter module’s visit-r...