Drupal core - SQL injection Exploit