Vulnerabilities

TI-2014-04285 CVE-2014-5250 · GHSA-59c5-fhxx-hqmx

Unspecified vulnerability in the AJAX autocompletion callback in the Biblio Autocomplete…

LOW 37

Unspecified vulnerability in the AJAX autocompletion callback in the Biblio Autocomplete module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to access data via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02357 Published 2014-08-14 No fix listed

TI-2014-04284 CVE-2014-5249 · GHSA-5cm6-ghvx-9ppq

SQL injection vulnerability in the "Biblio self autocomplete" submodule in the Biblio…

LOW 37

SQL injection vulnerability in the "Biblio self autocomplete" submodule in the Biblio Autocomplete module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to execute arbitrary SQL comm…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01946 Published 2014-08-14 No fix listed CWE-89

Vulnerabilities

Filters

Unspecified vulnerability in the AJAX autocompletion callback in the Biblio Autocomplete…

SQL injection vulnerability in the "Biblio self autocomplete" submodule in the Biblio…