CVE-2012-4488

Published: Oct 31, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Location module 6.x before 6.x-3.2 and 7.x before 7.x-3.0-alpha1 for Drupal does not properly check user or node access permissions, which allows remote attackers to read node or user results via the location search page.

Affected (11)

Products: Location Module Project: Location

Location Module Project

1 product

Location

Configuration A

11 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Location Module Project Location	Version 6.x-3.0
Location Module Project Location	Version 6.x-3.0 rc1
Location Module Project Location	Version 6.x-3.0 rc2
Location Module Project Location	Version 6.x-3.0 test3
Location Module Project Location	Version 6.x-3.1
Location Module Project Location	Version 6.x-3.1 rc1
Location Module Project Location	Version 6.x-3.x dev
Location Module Project Location	Version 7.x-1.0 beta1
Location Module Project Location	Version 7.x-3.x dev
Location Module Project Location	Version 7.x-4.x dev
Location Module Project Location	Version 7.x-5.x dev