Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6
CVSSv2

CVE-2012-1638

Published: 19/09/2012 Updated: 21/09/2012
CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8
VMScore: 534
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Subscribe to Dominique Clause

Vulnerability Summary

SQL injection vulnerability in the Search Autocomplete module prior to 7.x-2.1 for Drupal allows remote authenticated users with the "use search_autocomplete" permission to execute arbitrary SQL commands via unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

dominique_clause search_autocomplete

dominique_clause search_autocomplete 7.x-1.0

dominique_clause search_autocomplete 6.x-2.3

dominique_clause search_autocomplete 6.x-2.2

dominique_clause search_autocomplete 6.x-1.0

dominique_clause search_autocomplete 5.x-1.0

dominique_clause search_autocomplete 6.x-2.0

dominique_clause search_autocomplete 5.x-1.x

dominique_clause search_autocomplete 6.x-2.1

References

CWE-89http://drupal.org/node/1410674http://secunia.com/advisories/47731http://www.openwall.com/lists/oss-security/2012/04/07/1http://drupal.org/node/1416612http://www.securityfocus.com/bid/51667http://drupalcode.org/project/search_autocomplete.git/commit/589e8f6https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereferenceCVE-2023-52689CVE-2024-23803client sideCVE-2023-52696information disclosureCVE-2024-35843CVE-2024-27130CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook