Vulnerabilities (CVE)

Filtered by vendor Dominique Clause Subscribe
Filtered by product Search Autocomplete
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-4471 2 Dominique Clause, Drupal 2 Search Autocomplete, Drupal 2024-11-21 5.0 MEDIUM N/A
The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors.
CVE-2012-1638 2 Dominique Clause, Drupal 2 Search Autocomplete, Drupal 2024-11-21 6.0 MEDIUM N/A
SQL injection vulnerability in the Search Autocomplete module before 7.x-2.1 for Drupal allows remote authenticated users with the "use search_autocomplete" permission to execute arbitrary SQL commands via unspecified vectors.