1 matches found
SA-CONTRIB-2014-075 - Biblio Autocomplete - SQL injection and Access Bypass
This module provides functionality for AJAX based auto-completion of fields in the Biblio node type provided by the Biblio module using previously entered values and third party services. The submodule "Biblio self autocomplete" for previously entered values doesn't sufficiently sanitize user inp...
7.5CVSS6.8AI score0.02357EPSS
SaveExploits0References11
20