CVE-2012-1656 in Multisite Search

Sumário

de MITRE

SQL injection vulnerability in the Multisite Search module 6.x-2.2 for Drupal allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the Site table prefix field.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 12/03/2012
• Divulgação: 18/09/2012
• Moderação: aceite
• Entrada: VDB-62326
• CPE: pronto
• CWE: CWE-89 (confirmado)
• CVSS: 7.3 (VulDB)
• EPSS: 0.01271
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-1656
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-1656
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-1656/