Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Dominique Clause Component: Search Autocomplete Clear all filters
TI-2012-03813 CVE-2012-4471 · GHSA-hcq3-r7cj-wgm8

The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly…

Priority LOW 26

The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via uns…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01332 Published 2012-11-30 No fix listed CWE-264
TI-2012-01427 CVE-2012-1638 · GHSA-x765-mfcj-93v7

SQL injection vulnerability in the Search Autocomplete module before 7.x-2.1 for Drupal…

Priority LOW 29

SQL injection vulnerability in the Search Autocomplete module before 7.x-2.1 for Drupal allows remote authenticated users with the "use search_autocomplete" permission to execute arbitrary SQL commands via unspecified ve…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01081 Published 2012-09-19 No fix listed CWE-89