Dotan

**Name of the Vulnerable Software and Affected Versions** Drupal version 4.6 before revision 1.3.2.1 **Description** The issue allows remote attackers to execute arbitrary SQL commands via a job or resume search in the Job Search module. This is due to a SQL injection vulnerability in the job.module. **Recommendations** For Drupal version 4.6 before revision 1.3.2.1, update to revision 1.3.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Job Search module until the update is applied.