Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Dominique Clause Subscribe
Filtered by product Search Autocomplete
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-4471 2 Dominique Clause, Drupal 2 Search Autocomplete, Drupal 2013-01-29 5.0 MEDIUM N/A
The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors.
CVE-2012-1638 2 Dominique Clause, Drupal 2 Search Autocomplete, Drupal 2012-09-20 6.0 MEDIUM N/A
SQL injection vulnerability in the Search Autocomplete module before 7.x-2.1 for Drupal allows remote authenticated users with the "use search_autocomplete" permission to execute arbitrary SQL commands via unspecified vectors.