Description
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://osvdb.org/show/osvdb/113371Broken Link
- http://packetstormsecurity.com/files/128720/Drupal-7.X-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/128721/Drupal-7.31-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/128741/Drupal-HTTP-Parameter-Key-Value-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2014/Oct/75Exploit, Mailing List, Patch, Third Party Advisory
- http://secunia.com/advisories/59972Third Party Advisory
- http://www.debian.org/security/2014/dsa-3051Third Party Advisory
- http://www.exploit-db.com/exploits/34984Exploit, Third Party Advisory, VDB Entry
- http://www.exploit-db.com/exploits/34992Exploit, Third Party Advisory, VDB Entry
- http://www.exploit-db.com/exploits/34993Exploit, Third Party Advisory, VDB Entry
- http://www.exploit-db.com/exploits/35150Exploit, Third Party Advisory, VDB Entry
- http://www.openwall.com/lists/oss-security/2014/10/15/23Exploit, Mailing List, Patch
- http://www.securityfocus.com/archive/1/533706/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/70595Third Party Advisory, VDB Entry
- https://www.drupal.org/SA-CORE-2014-005Patch, Vendor Advisory
- https://www.sektioneins.de/en/advisories/advisory-012014-drupal-pre-auth-sql-injection-vulnerability.htmlExploit, Patch, Third Party Advisory
- https://www.sektioneins.de/en/blog/14-11-03-drupal-sql-injection-vulnerability-PoC.htmlExploit, Third Party Advisory
- http://osvdb.org/show/osvdb/113371Broken Link
- http://packetstormsecurity.com/files/128720/Drupal-7.X-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/128721/Drupal-7.31-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/128741/Drupal-HTTP-Parameter-Key-Value-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2014/Oct/75Exploit, Mailing List, Patch, Third Party Advisory
- http://secunia.com/advisories/59972Third Party Advisory
- http://www.debian.org/security/2014/dsa-3051Third Party Advisory
- http://www.exploit-db.com/exploits/34984Exploit, Third Party Advisory, VDB Entry
- http://www.exploit-db.com/exploits/34992Exploit, Third Party Advisory, VDB Entry
- http://www.exploit-db.com/exploits/34993Exploit, Third Party Advisory, VDB Entry
- http://www.exploit-db.com/exploits/35150Exploit, Third Party Advisory, VDB Entry
- http://www.openwall.com/lists/oss-security/2014/10/15/23Exploit, Mailing List, Patch
- http://www.securityfocus.com/archive/1/533706/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/70595Third Party Advisory, VDB Entry
- https://www.drupal.org/SA-CORE-2014-005Patch, Vendor Advisory
- https://www.sektioneins.de/en/advisories/advisory-012014-drupal-pre-auth-sql-injection-vulnerability.htmlExploit, Patch, Third Party Advisory
- https://www.sektioneins.de/en/blog/14-11-03-drupal-sql-injection-vulnerability-PoC.htmlExploit, Third Party Advisory
Timeline
- Published
- Oct 16, 2014
- Last modified
- Jun 17, 2026
- NVD status
- Modified