SQL injection flaw opens Drupal sites to attack

The Drupal 7 core is vulnerable to a "Highly Critical" SQL injection bug that could allow an attacker to compromise the site.



from Latest Topic for ZDNet in Security http://zd.net/1yDZYka