description: An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names.
problem types: SQL injection
affected:
{
product: Data-module
vendor: Drupal
versions:
status: affected, version: 6.x-1.0-alpha14
}