SQL injection vulnerability in the Help Tip module before 4.7.x-1.0 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/30809
http://www.vupen.com/english/advisories/2006/4941