CVE-2011-2715: Drupal SQL Injection vulnerability
Published Jan 14, 2020
·Updated
An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names.
Affected Software
4 affected components
composer/drupal/core=6.20
Drupal Drupal=6.20
Drupal Data=6.x-1.0-alpha14
composer/drupal/core=6.20
Remediation
Patch Available
Event History
Jan 14, 2020
CVE Published
via MITRE·09:22 PM
Data Sourced
via MITRE·09:22 PM
DescriptionWeakness
Data Sourced
via NVD·10:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Apr 22, 2022
Advisory Published
via GitHub·12:24 AM
Data Sourced
via GitHub·12:24 AM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via Packagist·12:24 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this SQL Injection vulnerability in Drupal 6.20 with Data 6.x-1.0-alpha14?
The vulnerability ID for this SQL Injection vulnerability is CVE-2011-2715.
2
What is the severity of CVE-2011-2715?
The severity of CVE-2011-2715 is critical (9.8).
3
How does this SQL Injection vulnerability in Drupal 6.20 with Data 6.x-1.0-alpha14 occur?
This SQL Injection vulnerability occurs due to insufficient sanitization of table names or column names.
4
What is the affected software for CVE-2011-2715?
The affected software for CVE-2011-2715 is Drupal 6.20 with Data 6.x-1.0-alpha14.
5
How can I fix CVE-2011-2715?
To fix CVE-2011-2715, it is recommended to upgrade to a version of Drupal that includes the necessary security patches.