Description

SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows remote attackers to execute arbitrary SQL commands via an SQL comment.

Remediation

References

CVE-2015-6659

Related Vulnerabilities

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4040)

Oracle Database Server CVE-2020-2510 Vulnerability (CVE-2020-2510)

LimeSurvey CVE-2019-16176 Vulnerability (CVE-2019-16176)

Moodle Other Vulnerability (CVE-2022-40208)

WordPress Plugin Foliopress WYSIWYG Cross-Site Scripting (2.6.8.4)

Severity

High

Classification

CVE-2015-6659 CWE-138

Tags

Missing Update Known Vulnerabilities