Sql injection

2012-09-1921:55:00

PRIOn knowledge base

www.prio-n.com

8.4 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.0%

JSON

SQL injection vulnerability in the Search Autocomplete module before 7.x-2.1 for Drupal allows remote authenticated users with the “use search_autocomplete” permission to execute arbitrary SQL commands via unspecified vectors.

CPENameOperatorVersion
search_autocompleteeq<= 7.x-2.0
search_autocompleteeq5.120.10
search_autocompleteeq5.x-1.0 beta2
search_autocompleteeq5.x-1.0 beta1
search_autocompleteeq5.x-1.x dev
search_autocompleteeq6.x-1.0 beta1
search_autocompleteeq6.120.10
search_autocompleteeq6.120.20
search_autocompleteeq6.x-2.0 alpha1
search_autocompleteeq6.120.21

Name	Operator	Version
search_autocomplete	eq	<= 7.x-2.0
search_autocomplete	eq	5.120.10
search_autocomplete	eq	5.x-1.0 beta2
search_autocomplete	eq	5.x-1.0 beta1
search_autocomplete	eq	5.x-1.x dev
search_autocomplete	eq	6.x-1.0 beta1
search_autocomplete	eq	6.120.10
search_autocomplete	eq	6.120.20
search_autocomplete	eq	6.x-2.0 alpha1
search_autocomplete	eq	6.120.21