ByteOS Network

CVE Vulnerability Details :

CVE-2012-6645

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-08 Apr, 2014 | 14:00

Updated At-06 Aug, 2024 | 21:36

▼CVE Numbering Authority (CNA)

Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via the title of a node, a different vulnerability than CVE-2012-1561.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://drupal.org/node/1432320	x_refsource_CONFIRM
http://drupal.org/node/1432318	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2012/03/19/9	mailing-list x_refsource_MLIST
http://drupalcode.org/project/finder.git/commit/bc0cc82	x_refsource_CONFIRM
http://www.osvdb.org/79015	vdb-entry x_refsource_OSVDB
http://www.openwall.com/lists/oss-security/2012/03/16/9	mailing-list x_refsource_MLIST
http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2012/04/07/1	mailing-list x_refsource_MLIST
http://secunia.com/advisories/47941	third-party-advisory x_refsource_SECUNIA
http://drupalcode.org/project/finder.git/commit/58443aa	x_refsource_CONFIRM
http://drupalcode.org/project/finder.git/commit/13e2d0c	x_refsource_CONFIRM
https://drupal.org/node/1432970	x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/73110	vdb-entry x_refsource_XF
http://secunia.com/advisories/47943	third-party-advisory x_refsource_SECUNIA
http://drupalcode.org/project/finder.git/commit/758fcf9	x_refsource_CONFIRM

Hyperlink: http://drupal.org/node/1432320

Resource:

x_refsource_CONFIRM

Hyperlink: http://drupal.org/node/1432318

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.openwall.com/lists/oss-security/2012/03/19/9

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://drupalcode.org/project/finder.git/commit/bc0cc82

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.osvdb.org/79015

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://www.openwall.com/lists/oss-security/2012/03/16/9

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities

Resource:

x_refsource_MISC

Hyperlink: http://www.openwall.com/lists/oss-security/2012/04/07/1

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://secunia.com/advisories/47941

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://drupalcode.org/project/finder.git/commit/58443aa

Resource:

x_refsource_CONFIRM

Hyperlink: http://drupalcode.org/project/finder.git/commit/13e2d0c

Resource:

x_refsource_CONFIRM

Hyperlink: https://drupal.org/node/1432970

Resource:

x_refsource_MISC

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/73110

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://secunia.com/advisories/47943

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://drupalcode.org/project/finder.git/commit/758fcf9

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://drupal.org/node/1432320	x_refsource_CONFIRM x_transferred
http://drupal.org/node/1432318	x_refsource_CONFIRM x_transferred
http://www.openwall.com/lists/oss-security/2012/03/19/9	mailing-list x_refsource_MLIST x_transferred
http://drupalcode.org/project/finder.git/commit/bc0cc82	x_refsource_CONFIRM x_transferred
http://www.osvdb.org/79015	vdb-entry x_refsource_OSVDB x_transferred
http://www.openwall.com/lists/oss-security/2012/03/16/9	mailing-list x_refsource_MLIST x_transferred
http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities	x_refsource_MISC x_transferred
http://www.openwall.com/lists/oss-security/2012/04/07/1	mailing-list x_refsource_MLIST x_transferred
http://secunia.com/advisories/47941	third-party-advisory x_refsource_SECUNIA x_transferred
http://drupalcode.org/project/finder.git/commit/58443aa	x_refsource_CONFIRM x_transferred
http://drupalcode.org/project/finder.git/commit/13e2d0c	x_refsource_CONFIRM x_transferred
https://drupal.org/node/1432970	x_refsource_MISC x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/73110	vdb-entry x_refsource_XF x_transferred
http://secunia.com/advisories/47943	third-party-advisory x_refsource_SECUNIA x_transferred
http://drupalcode.org/project/finder.git/commit/758fcf9	x_refsource_CONFIRM x_transferred