Description
SQL injection vulnerability in the Job Search module (job.module) 4.6 before revision 1.3.2.1 in Drupal allows remote attackers to execute arbitrary SQL commands via a job or resume search.
References
- http://drupal.org/node/77537
- jobsearch-search-sql-injection(28274) vdb-entry
- ADV-2006-3187 vdb-entry
- 21380 third-party-advisory
- 19420 vdb-entry