CWE Code: 89
Vulnerability Type: sql_injection
CVSS Score: 7.5
CWE Name:  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary: multiple sql injection vulnerabilities in the aggregation module 5.x before 5.x-4.4 for drupal allow remote attackers to execute arbitrary sql commands via unspecified vectors. per hyperlink record 1026625, drupal core is not affected. if you do not use the contributed aggregation module, there is nothing you need to do.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2008-07-03
Last Modified Date: 2017-08-08