CVE-2014-5250

The CVE-2014-5250 issue affects the Drupal Biblio Autocomplete module (6.x-1.x prior to 6.x-1.1 and 7.x-1.x prior to 7.x-1.5). The Drupal SA indicates an AJAX autocompletion vulnerability in the Biblio Autocomplete submodule, enabling data access by remote users (including anonymous) via unspecif...

CVE-2014-5249

The vulnerability CVE-2014-5249 affects the Drupal Biblio Autocomplete module, specifically the submodule Biblio self autocomplete in versions 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.5. The root cause is insufficient sanitization of user input in the Biblio self autocomplete submodule, wh...