Description

Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results.

Remediation

References

CVE-2012-5651

Related Vulnerabilities

WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress Supply Chain Attack [Polyfill.io] (1.6.23)

Oracle JRE CVE-2012-1725 Vulnerability (CVE-2012-1725)

WordPress Plugin WP Support Plus Responsive Ticket System Multiple Vulnerabilities (4.1)

phpList Other Vulnerability (CVE-2006-5524)

WordPress 4.5.x Cross-Domain Flash Injection Vulnerability (4.5 - 4.5.12)

Severity

Medium

Classification

CVE-2012-5651 CWE-264

Tags

Missing Update Known Vulnerabilities