Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-2922
5
MEDIUMCVSS v2
Published
May 21, 2012
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
The request_path function in includes/bootstrap.inc in Drupal 7.14 and earlier allows remote attackers to obtain sensitive information via the q[] parameter to index.php, which reveals the installation path in an error message.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 7.0, = 5.10, = 5.4, = 6.0, = 6.2, = 5.17, = 7.8, = 6.4, = 7.5, = 6.14, = 5.13, = 5.2, = 6.18, = 6.12, = 5.7, = 7.3, = 6.13, = 5.12, = 7.9, = 7.1, = 6.6, = 6.11, = 6.7, = 5.15, = 5.0, = 5.18, = 5.5, <= 7.14, = 7.12, = 7.4, = 5.23, = 5.22, = 5.19, = 7.6, = 6.8, = 6.1, = 6.5, = 5.16, = 5.6, = 7.11, = 7.10, = 6.10, = 6.17, = 5.1, = 5.21, = 6.16, = 5.9, = 5.20, = 6.3, = 5.8, = 7.7, = 6.15, = 5.14, = 5.3, = 7.2, = 6.9, = 5.11NVD
drupal
NPMImplementation of parts of Drupal’s user/access control API.
NPMImplementation of parts of Drupal’s user/access control API.= 7.0, = 5.10, = 5.4, = 6.0, = 6.2, = 5.17, = 7.8, = 6.4, = 7.5, = 6.14, = 5.13, = 5.2, = 6.18, = 6.12, = 5.7, = 7.3, = 6.13, = 5.12, = 7.9, = 7.1, = 6.6, = 6.11, = 6.7, = 5.15, = 5.0, = 5.18, = 5.5, <= 7.14, = 7.12, = 7.4, = 5.23, = 5.22, = 5.19, = 7.6, = 6.8, = 6.1, = 6.5, = 5.16, = 5.6, = 7.11, = 7.10, = 6.10, = 6.17, = 5.1, = 5.21, = 6.16, = 5.9, = 5.20, = 6.3, = 5.8, = 7.7, = 6.15, = 5.14, = 5.3, = 7.2, = 6.9, = 5.11