Link: Drupal Fixes Highly Critical SQL Injection Flaw

<blockquote class="link_og_blockquote">Drupal has patched a critical SQL injection vulnerability in version 7.x of the content management system that can allow arbitrary code execution.</blockquote>