| Package | Affected versions | Patched versions |
|---|---|---|
| acidfree | = 4.6_1.0= 4.7_1.0 |
SQL injection vulnerability in the Acidfree module for Drupal before 4.6.x-1.0, and before 4.7.x-1.0 in the 4.7 series, allows remote authenticated users with "create acidfree albums" privileges to execute arbitrary SQL commands via node titles.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free