CVE-2012-1656 in Multisite Search

Riassunto

di MITRE

SQL injection vulnerability in the Multisite Search module 6.x-2.2 for Drupal allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the Site table prefix field.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 12/03/2012
• Divulgazione: 18/09/2012
• Moderazione: accettato
• Voce: VDB-62326
• CPE: pronto
• CWE: CWE-89 (confermato)
• CVSS: 7.3 (VulDB)
• EPSS: 0.01271
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-1656
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-1656
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-1656/