drupal7

• Author: kikadf
• Vulnerable: 7.22-2arcturus4
• Unaffected: 7.22-2arcturus5

Stefan Horst discovered a vulnerability in the Drupal database abstraction API, which may result in SQL injection.

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3704