Description
SQL injection vulnerability in Extended Tracker (xtracker) 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "parameters from URLs."
References
- ADV-2006-4218 vdb-entry
- extended-unspecified-sql-injection(29821) vdb-entry
- 22566 third-party-advisory
- 20759 vdb-entry
- http://drupal.org/node/91358