CVE-2012-1656

The CVE-2012-1656 issue affects the Drupal Multisite Search module (6.x-2.2). The module does not sufficiently escape user input when constructing queries, enabling SQL injection via the Site table prefix field by remote authenticated users with certain permissions. Affected: Multisite Search mod...