GCVE - cpe:2.3:a:drupal_7_driver_for_sql_server_and_sql_azure_project:drupal_7_driver_for_sql_server_and_sql

Approved changes feed: RSS · Atom

cpe:2.3:a:drupal_7_driver_for_sql_server_and_sql_azure_project:drupal_7_driver_for_sql_server_and_sql_azure:7.x-1.2:*:*:*:*:drupal:*:*

part: a version: 7.x-1.2 update: *

Vendor	Drupal 7 Driver For Sql Server And Sql Azure Project (`d73c19c5-1fdd-59bf-b545-423f9165ad4c`)
Product	Drupal 7 Driver For Sql Server And Sql Azure (`16cdc532-c54a-5b86-84f1-b7686e8235ce`)
Edition	*
Language	*
Software edition	*
Target software	drupal
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-7876`	vulnerable	2026-06-08 05:07:02.252366	Details available The escapeLike function in sqlsrv/database.inc in the Drupal 7 driver for SQL Server and SQL Azure 7.x-1.x before 7.x-1.4 does not properly escape certain characters, which allows remote attackers to execute arbitrary SQL commands via vectors involving a module using the db_like function. Published: 2015-10-21T14:00:00.000Z Updated: 2024-08-06T08:06:30.672Z Open on db.gcve.eu Reference links https://www.drupal.org/node/2569577 https://www.drupal.org/node/2569005 https://www.drupal.org/node/2569003 http://cgit.drupalcode.org/sqlsrv/commit/?id=2ea0da8	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.