Lucene search
+L

3 matches found

CVE
CVE
•added 2012/11/30 10:00 p.m.•50 views

CVE-2012-4471

The vulnerability CVE-2012-4471 affects the Drupal Search Autocomplete module for Drupal 7.x-2.x before 7.x-2.4, where access control to the module’s admin page is insufficiently restricted. This allows remote attackers to disable autocompletion or alter priority order via unspecified vectors. Th...

5CVSS6.9AI score0.01332EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/11/30 12:00 a.m.•4 views

CVE-2012-4471: Undefined Security Weakness

The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors...

5CVSS5.9AI score0.01332EPSS
SaveExploits0References2
Drupal
Drupal
•added 2012/07/11 12:00 a.m.•28 views

SA-CONTRIB-2012-107 - Search autocomplete - Access bypass

This module allows you to add autocomplete functionality to virtually any fields of a Drupal site. The module doesn't sufficiently protect access to the module admin page. This vulnerability is mitigated by the fact that the user can only access the page, disable an autocompletion or change...

5CVSS6.4AI score0.01332EPSS
SaveExploits0References10
Rows per page
Query Builder