4.3

CVE-2012-6645

Exploit
Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via the title of a node, a different vulnerability than CVE-2012-1561.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Danielb ≫ Finder Version6.x-1.0
Danielb ≫ Finder Version6.x-1.0 Updatealpha1
Danielb ≫ Finder Version6.x-1.0 Updatealpha10
Danielb ≫ Finder Version6.x-1.0 Updatealpha11
Danielb ≫ Finder Version6.x-1.0 Updatealpha12
Danielb ≫ Finder Version6.x-1.0 Updatealpha13
Danielb ≫ Finder Version6.x-1.0 Updatealpha14
Danielb ≫ Finder Version6.x-1.0 Updatealpha15
Danielb ≫ Finder Version6.x-1.0 Updatealpha16
Danielb ≫ Finder Version6.x-1.0 Updatealpha17
Danielb ≫ Finder Version6.x-1.0 Updatealpha18
Danielb ≫ Finder Version6.x-1.0 Updatealpha19
Danielb ≫ Finder Version6.x-1.0 Updatealpha2
Danielb ≫ Finder Version6.x-1.0 Updatealpha20
Danielb ≫ Finder Version6.x-1.0 Updatealpha21
Danielb ≫ Finder Version6.x-1.0 Updatealpha22
Danielb ≫ Finder Version6.x-1.0 Updatealpha23
Danielb ≫ Finder Version6.x-1.0 Updatealpha24
Danielb ≫ Finder Version6.x-1.0 Updatealpha25
Danielb ≫ Finder Version6.x-1.0 Updatealpha26
Danielb ≫ Finder Version6.x-1.0 Updatealpha27
Danielb ≫ Finder Version6.x-1.0 Updatealpha28
Danielb ≫ Finder Version6.x-1.0 Updatealpha3
Danielb ≫ Finder Version6.x-1.0 Updatealpha4
Danielb ≫ Finder Version6.x-1.0 Updatealpha5
Danielb ≫ Finder Version6.x-1.0 Updatealpha6
Danielb ≫ Finder Version6.x-1.0 Updatealpha7
Danielb ≫ Finder Version6.x-1.0 Updatealpha8
Danielb ≫ Finder Version6.x-1.0 Updatealpha9
Danielb ≫ Finder Version6.x-1.0 Updatebeta1
Danielb ≫ Finder Version6.x-1.0 Updatebeta2
Danielb ≫ Finder Version6.x-1.0 Updatebeta3
Danielb ≫ Finder Version6.x-1.0 Updaterc1
Danielb ≫ Finder Version6.x-1.0 Updaterc2
Danielb ≫ Finder Version6.x-1.0 Updaterc3
Danielb ≫ Finder Version6.x-1.0 Updaterc4
Danielb ≫ Finder Version6.x-1.0 Updateunstable0
Danielb ≫ Finder Version6.x-1.0 Updateunstable1
Danielb ≫ Finder Version6.x-1.0 Updateunstable2
Danielb ≫ Finder Version6.x-1.0 Updateunstable3
Danielb ≫ Finder Version6.x-1.0 Updateunstable4
Danielb ≫ Finder Version6.x-1.0 Updateunstable5
Danielb ≫ Finder Version6.x-1.0 Updateunstable6
Danielb ≫ Finder Version6.x-1.0 Updateunstable7
Danielb ≫ Finder Version6.x-1.1
Danielb ≫ Finder Version6.x-1.2
Danielb ≫ Finder Version6.x-1.3
Danielb ≫ Finder Version6.x-1.4
Danielb ≫ Finder Version6.x-1.5
Danielb ≫ Finder Version6.x-1.6
Danielb ≫ Finder Version6.x-1.7
Danielb ≫ Finder Version6.x-1.8
Danielb ≫ Finder Version6.x-1.9
Danielb ≫ Finder Version6.x-1.10
Danielb ≫ Finder Version6.x-1.11
Danielb ≫ Finder Version6.x-1.12
Danielb ≫ Finder Version6.x-1.13
Danielb ≫ Finder Version6.x-1.14
Danielb ≫ Finder Version6.x-1.15
Danielb ≫ Finder Version6.x-1.16
Danielb ≫ Finder Version6.x-1.17
Danielb ≫ Finder Version6.x-1.18
Danielb ≫ Finder Version6.x-1.19
Danielb ≫ Finder Version6.x-1.20
Danielb ≫ Finder Version6.x-1.21
Danielb ≫ Finder Version6.x-1.23
Danielb ≫ Finder Version6.x-1.24
Danielb ≫ Finder Version6.x-1.25
Danielb ≫ Finder Version6.x-1.x-dev
Danielb ≫ Finder Version7.x-1.0
Danielb ≫ Finder Version7.x-1.1
Danielb ≫ Finder Version7.x-1.2
Danielb ≫ Finder Version7.x-1.3
Danielb ≫ Finder Version7.x-1.4
Danielb ≫ Finder Version7.x-1.5
Danielb ≫ Finder Version7.x-1.6
Danielb ≫ Finder Version7.x-1.x Updatedev
Danielb ≫ Finder Version7.x-2.0 Updatealpha1
Danielb ≫ Finder Version7.x-2.0 Updatealpha2
Danielb ≫ Finder Version7.x-2.0 Updatealpha3
Danielb ≫ Finder Version7.x-2.0 Updatealpha4
Danielb ≫ Finder Version7.x-2.0 Updatealpha5
Danielb ≫ Finder Version7.x-2.0 Updatealpha6
Danielb ≫ Finder Version7.x-2.x Updatedev
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.95% 0.742
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://drupal.org/node/1432320
Patch
Vendor Advisory