Sql injection

SQL injection vulnerability in the Multisite Search module 6.x-2.2 for Drupal allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the Site table prefix field...

CVE-2012-1656: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Multisite Search module 6.x-2.2 for Drupal allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the Site table prefix field...

PT-2012-3420

Name of the Vulnerable Software and Affected Versions Drupal Multisite Search module version 6.x-2.2 Description The issue allows remote authenticated users with certain permissions to execute arbitrary SQL commands. This is achieved via the Site table prefix field. Recommendations For version...