CVE-2012-4471 in Search Autocomplete
Сводка (Английский)
The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Резервировать
21.08.2012
Раскрытие
30.11.2012
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 63094 | Dominique Clause Search Autocomplete эскалация привилегий | 264 | Не определено | Официальное исправление | CVE-2012-4471 |