Drupal 7 SQL injection: SA-CORE-2014-005
Drupal fixed a serious SQL-injection flaw in 7.32. Its security team reported systematic attacks after disclosure and warned that delayed patching could require compromise investigation, not just an update.
Source ↗

