Solution : Upgrade your Drupal Version .

Hacker Show :

Otherwise hacker will use this 🙂

http://www.homelab.it/index.php/2014/10/17/drupal-7-sql-injection/