Loading HuntDB...

GHSA-hcq9-hmgf-6qr9

GitHub Security Advisory

Drupal SQL Injection vulnerability

✓ GitHub Reviewed CRITICAL Has CVE

Advisory Details

An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names.

Affected Packages

Packagist drupal/core

Related CVEs

Key Information

GHSA ID
GHSA-hcq9-hmgf-6qr9
Published
April 22, 2022 12:24 AM
Last Modified
April 23, 2024 10:29 PM
CVSS Score
9.0 /10
Primary Ecosystem
Packagist
Primary Package
drupal/core
GitHub Reviewed
✓ Yes

Dataset

Last updated: June 18, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.