CVE-2012-5652

Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed or (2) search result.

Date published : 2013-01-02

http://www.securityfocus.com/bid/56993

http://drupal.org/SA-CORE-2012-004