CVE-2011-1663: SQL Injection
Published Apr 10, 2011
·Updated
SQL injection vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
21 affected components
Icanlocalize Translation Management=6.x-1.0
Icanlocalize Translation Management=6.x-1.0-beta1
Icanlocalize Translation Management=6.x-1.0-beta2
Icanlocalize Translation Management=6.x-1.0-beta3
Icanlocalize Translation Management=6.x-1.0-beta4
Icanlocalize Translation Management=6.x-1.0-beta5
Icanlocalize Translation Management=6.x-1.0-beta6
Icanlocalize Translation Management=6.x-1.0-beta7
Icanlocalize Translation Management=6.x-1.1
Icanlocalize Translation Management=6.x-1.2
Icanlocalize Translation Management=6.x-1.2-beta1
Icanlocalize Translation Management=6.x-1.3
Icanlocalize Translation Management=6.x-1.4
Icanlocalize Translation Management=6.x-1.5
Icanlocalize Translation Management=6.x-1.6
Icanlocalize Translation Management=6.x-1.7
Icanlocalize Translation Management=6.x-1.8
Icanlocalize Translation Management=6.x-1.9
Icanlocalize Translation Management=6.x-1.20
Icanlocalize Translation Management=6.x-1.x-dev
Drupal Drupal
Remediation
Patch Available
Event History
Apr 10, 2011
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
02:51 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
Which installations are affected?
Drupal sites using the Translation Management module 6.x earlier than 6.x-1.21 are affected. The listed software is Icanlocalize Translation Management.
2
Does exploitation require authentication or local access?
No. The vulnerability is remotely exploitable and does not require authentication, as indicated by the AV:N and Au:N metrics.
3
What is the potential impact of successful exploitation?
A remote attacker may execute arbitrary SQL commands. The provided severity vector indicates potential impact to confidentiality, integrity, and availability.
4
What should administrators do?
Apply the available patch by updating the Translation Management module to version 6.x-1.21 or later.