SQL Injection in Drupal

CVE-2011-4113

SQL injection vulnerability in the Views module before 6.x-2.13 for Drupal allows remote attackers to execute arbitrary SQL commands via vectors related to "filters/arguments on certain types of views with specific configurations of arguments."

Vulnerability class: SQL Injection

EPSS: 0.017 (75.0th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References