Mass Drupal SQL Injection Attacks – Turning SQLi into Code Execution
blog.sucuri.net