3 matches found
CVE-2012-4471
The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors...
CVE-2012-4471
The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors...
PT-2012-5419
Name of the Vulnerable Software and Affected Versions Drupal Search Autocomplete module versions 7.x-2.x before 7.x-2.4 Description The issue allows remote attackers to disable an autocompletion or change the priority order due to improper access restriction to the module admin page...