Search Results (Refine Search)
- CPE Product Version: cpe:/a:drupal:drupal:7.14
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2012-2922 |
The request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q[] parameter to index.php, which reveals the installation path in an error message. Published: May 21, 2012; 6:55:01 PM -0400 |
V4.0:(not available) V3.x:(not available) V2.0: 5.0 MEDIUM |