CVE-2012-4471

Published: Nov 30, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors.

Affected (4)

Products: Dominique Clause: Search Autocomplete

Dominique Clause

1 product

Search Autocomplete

Configuration A

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dominique Clause Search Autocomplete	Version 7.x-2.0
Dominique Clause Search Autocomplete	Version 7.x-2.1
Dominique Clause Search Autocomplete	Version 7.x-2.3
Dominique Clause Search Autocomplete	Version 7.x-2.x dev