SA-CORE-2014-004, drupal7