Security Advisory

CVE-2014-5249

7.5

Vulnerability Description

SQL injection vulnerability in the "Biblio self autocomplete" submodule in the Biblio Autocomplete module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Published Date August 14, 2014
Official Source NIST NVD Advisory