PT-2012-1804
CVE-2011-4113
·
Published
2012-02-17
·
Updated
2017-08-29
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Drupal Views module versions prior to 6.x-2.13
Description
The issue allows remote attackers to execute arbitrary SQL commands via vectors related to "filters/arguments on certain types of views with specific configurations of arguments."
Recommendations
For versions prior to 6.x-2.13, update to version 6.x-2.13 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾