CVE-2011-2715

Summary

An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names.

Affected Software

VendorProductVersion RangeStatus
DrupalData-module6.x-1.0-alpha14affected

Weaknesses

  • SQL injection

ADP Enrichment

CVE Program Container

Additional References

References