CVE-2012-2922

Published: May 21, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q[] parameter to index.php, which reveals the installation path in an error message.

Affected (79)

Products: Drupal: Drupal

Drupal

1 product

Drupal

Configuration A

79 vulnerable

Vulnerable Software	Affected Versions
Drupal Drupal	Up to 7.14
Drupal Drupal	Version 5.0
Drupal Drupal	Version 5.0 beta1
Drupal Drupal	Version 5.0 beta2
Drupal Drupal	Version 5.0 dev
Drupal Drupal	Version 5.0 rc1
Drupal Drupal	Version 5.0 rc2
Drupal Drupal	Version 5.10
Drupal Drupal	Version 5.11
Drupal Drupal	Version 5.12
Drupal Drupal	Version 5.13
Drupal Drupal	Version 5.14
Drupal Drupal	Version 5.15
Drupal Drupal	Version 5.16
Drupal Drupal	Version 5.17
Drupal Drupal	Version 5.18
Drupal Drupal	Version 5.19
Drupal Drupal	Version 5.1
Drupal Drupal	Version 5.20
Drupal Drupal	Version 5.21
Drupal Drupal	Version 5.22
Drupal Drupal	Version 5.23
Drupal Drupal	Version 5.2
Drupal Drupal	Version 5.3
Drupal Drupal	Version 5.4
Drupal Drupal	Version 5.5
Drupal Drupal	Version 5.6
Drupal Drupal	Version 5.7
Drupal Drupal	Version 5.8
Drupal Drupal	Version 5.9
Drupal Drupal	Version 6.0
Drupal Drupal	Version 6.0 beta1
Drupal Drupal	Version 6.0 beta2
Drupal Drupal	Version 6.0 beta3
Drupal Drupal	Version 6.0 beta4
Drupal Drupal	Version 6.0 dev
Drupal Drupal	Version 6.0 rc1
Drupal Drupal	Version 6.0 rc2
Drupal Drupal	Version 6.0 rc3
Drupal Drupal	Version 6.0 rc4
Drupal Drupal	Version 6.10
Drupal Drupal	Version 6.11
Drupal Drupal	Version 6.12
Drupal Drupal	Version 6.13
Drupal Drupal	Version 6.14
Drupal Drupal	Version 6.15
Drupal Drupal	Version 6.16
Drupal Drupal	Version 6.17
Drupal Drupal	Version 6.18
Drupal Drupal	Version 6.1
Drupal Drupal	Version 6.2
Drupal Drupal	Version 6.3
Drupal Drupal	Version 6.4
Drupal Drupal	Version 6.5
Drupal Drupal	Version 6.6
Drupal Drupal	Version 6.7
Drupal Drupal	Version 6.8
Drupal Drupal	Version 6.9
Drupal Drupal	Version 7.0
Drupal Drupal	Version 7.0 alpha1
Drupal Drupal	Version 7.0 alpha2
Drupal Drupal	Version 7.0 alpha3
Drupal Drupal	Version 7.0 alpha4
Drupal Drupal	Version 7.0 alpha5
Drupal Drupal	Version 7.0 alpha6
Drupal Drupal	Version 7.0 alpha7
Drupal Drupal	Version 7.0 dev
Drupal Drupal	Version 7.10
Drupal Drupal	Version 7.11
Drupal Drupal	Version 7.12
Drupal Drupal	Version 7.1
Drupal Drupal	Version 7.2
Drupal Drupal	Version 7.3
Drupal Drupal	Version 7.4
Drupal Drupal	Version 7.5
Drupal Drupal	Version 7.6
Drupal Drupal	Version 7.7
Drupal Drupal	Version 7.8
Drupal Drupal	Version 7.9