VDB
CVE-2015-6659
CVE-2015-6659
PUBLISHED
SQL injection vulnerability in the SQL comment filtering system in the Database API in Drupal 7.x before 7.39 allows remote attackers to execute arbitrary SQL commands via an SQL comment.
EPSS 14.45% · 94.6th percentile
Risk Scores
EPSS Score
14.45%
94.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:Pro:14.04:LTS | drupal7 | 0, 7.23-1, 7.24-1 |
Exploit Intelligence
- FEDORA-2015-14442 (circl)
- FEDORA-2015-13915 (circl)
- 1033358 (circl)
- FEDORA-2015-14443 (circl)
- FEDORA-2015-13917 (circl)
- 76432 (circl)
- DSA-3346 (circl)
- https://www.drupal.org/SA-CORE-2015-003 (circl)
- FEDORA-2015-14444 (circl)
- FEDORA-2015-13916 (circl)
Timeline
- Aug 24, 2015 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 20, 2025 EPSS Score
- Mar 21, 2025 EPSS Score
- Mar 24, 2025 EPSS Score
- Mar 26, 2025 EPSS Score
- Mar 27, 2025 EPSS Score
- Mar 30, 2025 EPSS Score
- Apr 2, 2025 EPSS Score
- May 1, 2025 EPSS Score
- May 4, 2025 EPSS Score
References
- https://ubuntu.com/security/CVE-2015-6659 third-party-advisory
- https://www.drupal.org/SA-CORE-2015-003 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2015-6659 third-party-advisory