CVE-2014-3704
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to con…
Published: 2014-10-16 · CVSS: Unscored
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7