Description

Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results.

Remediation

References

CVE-2012-5651

Related Vulnerabilities

WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.24)

WordPress Plugin Gallery PhotoBlocks Unspecified Vulnerability (1.1.32)

WordPress Plugin Asgaros Forum Cross-Site Request Forgery (1.5.8)

WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.29)

WordPress Plugin MyPixs Local File Inclusion (0.3)

Severity

Medium

Classification

CVE-2012-5651 CWE-264

Tags

Missing Update Known Vulnerabilities