SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."
| Software | From | Fixed in |
|---|---|---|
| drupal / drupal | 6.0 | 6.3 |
| fedoraproject / fedora | 8 | 8.x |
| fedoraproject / fedora | 9 | 9.x |