SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows remote attackers to execute arbitrary SQL commands via an SQL comment.
2015-08-24T14:59:16.337
2025-04-12T10:46:40.837
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.1 | Yes |
| Application | drupal | drupal | 7.2 | Yes |
| Application | drupal | drupal | 7.3 | Yes |
| Application | drupal | drupal | 7.4 | Yes |
| Application | drupal | drupal | 7.5 | Yes |
| Application | drupal | drupal | 7.6 | Yes |
| Application | drupal | drupal | 7.7 | Yes |
| Application | drupal | drupal | 7.8 | Yes |
| Application | drupal | drupal | 7.9 | Yes |
| Application | drupal | drupal | 7.10 | Yes |
| Application | drupal | drupal | 7.11 | Yes |
| Application | drupal | drupal | 7.12 | Yes |
| Application | drupal | drupal | 7.13 | Yes |
| Application | drupal | drupal | 7.14 | Yes |
| Application | drupal | drupal | 7.15 | Yes |
| Application | drupal | drupal | 7.16 | Yes |
| Application | drupal | drupal | 7.17 | Yes |
| Application | drupal | drupal | 7.18 | Yes |
| Application | drupal | drupal | 7.19 | Yes |
| Application | drupal | drupal | 7.20 | Yes |
| Application | drupal | drupal | 7.21 | Yes |
| Application | drupal | drupal | 7.22 | Yes |
| Application | drupal | drupal | 7.23 | Yes |
| Application | drupal | drupal | 7.24 | Yes |
| Application | drupal | drupal | 7.25 | Yes |
| Application | drupal | drupal | 7.26 | Yes |
| Application | drupal | drupal | 7.27 | Yes |
| Application | drupal | drupal | 7.28 | Yes |
| Application | drupal | drupal | 7.29 | Yes |
| Application | drupal | drupal | 7.30 | Yes |
| Application | drupal | drupal | 7.33 | Yes |
| Application | drupal | drupal | 7.34 | Yes |
| Application | drupal | drupal | 7.35 | Yes |
| Application | drupal | drupal | 7.36 | Yes |
| Application | drupal | drupal | 7.37 | Yes |
| Application | drupal | drupal | 7.38 | Yes |
| Application | drupal | drupal | 7.x-dev | Yes |