CVE-2012-1638

SQL injection vulnerability in the Search Autocomplete module before 7.x-2.1 for Drupal allows remote authenticated users with the "use searchautocomplete" permission to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-1638

The CVE-2012-1638 issue affects the Drupal Search Autocomplete module (7.x) before version 7.x-2.1. The vulnerability arises because the module does not properly use Drupal’s database API, allowing a remote authenticated user with the permission "use search_autocomplete" to execute arbitrary SQL ...