CVE-2012-1638

SQL injection vulnerability in the Search Autocomplete module before 7.x-2.1 for Drupal allows remote authenticated users with the "use searchautocomplete" permission to execute arbitrary SQL commands via unspecified vectors...

PT-2012-5419

Name of the Vulnerable Software and Affected Versions Drupal Search Autocomplete module versions 7.x-2.x before 7.x-2.4 Description The issue allows remote attackers to disable an autocompletion or change the priority order due to improper access restriction to the module admin page...

PT-2012-3402

Name of the Vulnerable Software and Affected Versions Drupal Search Autocomplete module versions prior to 7.x-2.1 Description The issue allows remote authenticated users with the "use search autocomplete" permission to execute arbitrary SQL commands. Recommendations For versions prior to 7.x-2.1,...