VULNERABILITY INTELLIGENCE

CVE-2012-1638

CVSS score6 MEDIUM

EPSS probability1.08%

CISA KEVNot currently listed

Published2012-09-19

Last modified2026-06-16

Description

SQL injection vulnerability in the Search Autocomplete module before 7.x-2.1 for Drupal allows remote authenticated users with the "use search_autocomplete" permission to execute arbitrary SQL commands via unspecified vectors.