CVE-2012-4471

Summary

The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2012/10/04/3
• http://drupal.org/node/1679422
• http://drupal.org/node/1649442
• http://www.securityfocus.com/bid/54379

References

• http://www.openwall.com/lists/oss-security/2012/10/04/3
• http://drupal.org/node/1679422
• http://drupal.org/node/1649442
• http://www.securityfocus.com/bid/54379

• ←Previous
• Next→