← Database

CVE-2006-2742

HIGH CVSS: 7.5 Published: 2006-06-01 Modified: 2026-06-16

Description

SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and (c) database.mysqli.inc.

Affected Platforms

Drupal Drupal

Weakness Type

NVD-CWE-Other

References