CVE-2015-3345

SQL injection vulnerability in the PHPlist Integration Module before 6.x-1.7 for Drupal allows remote administrators to execute arbitrary SQL commands via unspecified vectors, related to the "phpList database."...

CVE-2015-3345: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the PHPlist Integration Module before 6.x-1.7 for Drupal allows remote administrators to execute arbitrary SQL commands via unspecified vectors, related to the "phpList database."...

PT-2015-6166

Name of the Vulnerable Software and Affected Versions Drupal PHPlist Integration Module versions prior to 6.x-1.7 Description The issue allows remote administrators to execute arbitrary SQL commands, related to the "phpList database." Recommendations For versions prior to 6.x-1.7, update to versi...