CVE-2011-2715: Drupal Data

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names.

Affected products

• Drupal Data: version 6.x-1.0 only
• Drupal Drupal: version 6.20 only

Published 2020-01-14. Last modified 2026-06-16.