Drupal: Critical SQL injection flaw now targeted in attacks
…websites, resulting in unauthorized access, modification, or deletion of database data. The flaw is exploitable without authentication and could result in remote code execution, privilege escalation, and information disclosure. In an update…