Description
SQL injection vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References
- 21435 third-party-advisory
- ADV-2006-3227 vdb-entry
- http://drupal.org/node/77756
- 19441 vdb-entry
- bibliography-unspecified-sql-injection(28296) vdb-entry