{"api_version":"1","generated_at":"2026-07-23T05:35:22+00:00","cve":"CVE-2012-6645","urls":{"html":"https://cve.report/CVE-2012-6645","api":"https://cve.report/api/cve/CVE-2012-6645.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-6645","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-6645"},"summary":{"title":"CVE-2012-6645","description":"Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via the title of a node, a different vulnerability than CVE-2012-1561.","state":"PUBLISHED","assigner":"mitre","published_at":"2014-04-08 14:22:09","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2012/04/07/1","name":"http://www.openwall.com/lists/oss-security/2012/04/07/1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://drupalcode.org/project/finder.git/commit/13e2d0c","name":"http://drupalcode.org/project/finder.git/commit/13e2d0c","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Log in | Drupal.org","mime":"text/html","httpstatus":"200","archivestatus":"403"},{"url":"http://www.openwall.com/lists/oss-security/2012/03/19/9","name":"http://www.openwall.com/lists/oss-security/2012/03/19/9","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE-request: Drupal Finder SA-CONTRIB-2012-017","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://drupalcode.org/project/finder.git/commit/58443aa","name":"http://drupalcode.org/project/finder.git/commit/58443aa","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Log in | Drupal.org","mime":"text/html","httpstatus":"200","archivestatus":"403"},{"url":"http://drupalcode.org/project/finder.git/commit/bc0cc82","name":"http://drupalcode.org/project/finder.git/commit/bc0cc82","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Log in | Drupal.org","mime":"text/html","httpstatus":"200","archivestatus":"403"},{"url":"http://drupal.org/node/1432320","name":"http://drupal.org/node/1432320","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"finder 7.x-2.0-alpha8 | drupal.org","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2012/03/16/9","name":"http://www.openwall.com/lists/oss-security/2012/03/16/9","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - CVE-request: Drupal Finder SA-CONTRIB-2012-017","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/47943","name":"http://secunia.com/advisories/47943","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"About Secunia Research | Flexera","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/79015","name":"http://www.osvdb.org/79015","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities","name":"http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Drupal Finder 6.x-1.9 XSS and Remote Code Execution Vulnerabilities | Mad Irish . net","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://drupal.org/node/1432970","name":"https://drupal.org/node/1432970","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SA-CONTRIB-2012-017 - Finder - Multiple vulnerabilities | drupal.org","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://drupalcode.org/project/finder.git/commit/758fcf9","name":"http://drupalcode.org/project/finder.git/commit/758fcf9","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Log in | Drupal.org","mime":"text/html","httpstatus":"200","archivestatus":"403"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73110","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73110","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/47941","name":"http://secunia.com/advisories/47941","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Security Advisory SA47941 - Drupal Finder Module Multiple Script Insertion Vulnerabilities - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://drupal.org/node/1432318","name":"http://drupal.org/node/1432318","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"finder 6.x-1.26 | drupal.org","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6645","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6645","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha10","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha11","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha12","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha13","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha14","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha15","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha16","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha17","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha18","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha19","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha20","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha21","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha22","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha23","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha24","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha25","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha26","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha27","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha28","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha5","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha6","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha7","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha8","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"alpha9","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"beta1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"beta2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"beta3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"rc4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"unstable0","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"unstable1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"unstable2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"unstable3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"unstable4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"unstable5","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"unstable6","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.0","cpe7":"unstable7","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.19","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.23","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.24","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.25","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"6.x-1.x-dev","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-1.x","cpe7":"dev","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-2.0","cpe7":"alpha1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-2.0","cpe7":"alpha2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-2.0","cpe7":"alpha3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-2.0","cpe7":"alpha4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-2.0","cpe7":"alpha5","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-2.0","cpe7":"alpha6","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"6645","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"danielb","cpe5":"finder","cpe6":"7.x-2.x","cpe7":"dev","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T21:36:01.914Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://drupal.org/node/1432320"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://drupal.org/node/1432318"},{"name":"[oss-security] 20120319 Re: CVE-request: Drupal Finder SA-CONTRIB-2012-017","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2012/03/19/9"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://drupalcode.org/project/finder.git/commit/bc0cc82"},{"name":"79015","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/79015"},{"name":"[oss-security] 20120316 CVE-request: Drupal Finder SA-CONTRIB-2012-017","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2012/03/16/9"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities"},{"name":"[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2012/04/07/1"},{"name":"47941","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/47941"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://drupalcode.org/project/finder.git/commit/58443aa"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://drupalcode.org/project/finder.git/commit/13e2d0c"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://drupal.org/node/1432970"},{"name":"drupal-finder-unspecified-xss(73110)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73110"},{"name":"47943","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/47943"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://drupalcode.org/project/finder.git/commit/758fcf9"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2012-01-30T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via the title of a node, a different vulnerability than CVE-2012-1561."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://drupal.org/node/1432320"},{"tags":["x_refsource_CONFIRM"],"url":"http://drupal.org/node/1432318"},{"name":"[oss-security] 20120319 Re: CVE-request: Drupal Finder SA-CONTRIB-2012-017","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2012/03/19/9"},{"tags":["x_refsource_CONFIRM"],"url":"http://drupalcode.org/project/finder.git/commit/bc0cc82"},{"name":"79015","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/79015"},{"name":"[oss-security] 20120316 CVE-request: Drupal Finder SA-CONTRIB-2012-017","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2012/03/16/9"},{"tags":["x_refsource_MISC"],"url":"http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities"},{"name":"[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2012/04/07/1"},{"name":"47941","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/47941"},{"tags":["x_refsource_CONFIRM"],"url":"http://drupalcode.org/project/finder.git/commit/58443aa"},{"tags":["x_refsource_CONFIRM"],"url":"http://drupalcode.org/project/finder.git/commit/13e2d0c"},{"tags":["x_refsource_MISC"],"url":"https://drupal.org/node/1432970"},{"name":"drupal-finder-unspecified-xss(73110)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73110"},{"name":"47943","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/47943"},{"tags":["x_refsource_CONFIRM"],"url":"http://drupalcode.org/project/finder.git/commit/758fcf9"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2012-6645","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via the title of a node, a different vulnerability than CVE-2012-1561."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://drupal.org/node/1432320","refsource":"CONFIRM","url":"http://drupal.org/node/1432320"},{"name":"http://drupal.org/node/1432318","refsource":"CONFIRM","url":"http://drupal.org/node/1432318"},{"name":"[oss-security] 20120319 Re: CVE-request: Drupal Finder SA-CONTRIB-2012-017","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2012/03/19/9"},{"name":"http://drupalcode.org/project/finder.git/commit/bc0cc82","refsource":"CONFIRM","url":"http://drupalcode.org/project/finder.git/commit/bc0cc82"},{"name":"79015","refsource":"OSVDB","url":"http://www.osvdb.org/79015"},{"name":"[oss-security] 20120316 CVE-request: Drupal Finder SA-CONTRIB-2012-017","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2012/03/16/9"},{"name":"http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities","refsource":"MISC","url":"http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities"},{"name":"[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2012/04/07/1"},{"name":"47941","refsource":"SECUNIA","url":"http://secunia.com/advisories/47941"},{"name":"http://drupalcode.org/project/finder.git/commit/58443aa","refsource":"CONFIRM","url":"http://drupalcode.org/project/finder.git/commit/58443aa"},{"name":"http://drupalcode.org/project/finder.git/commit/13e2d0c","refsource":"CONFIRM","url":"http://drupalcode.org/project/finder.git/commit/13e2d0c"},{"name":"https://drupal.org/node/1432970","refsource":"MISC","url":"https://drupal.org/node/1432970"},{"name":"drupal-finder-unspecified-xss(73110)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73110"},{"name":"47943","refsource":"SECUNIA","url":"http://secunia.com/advisories/47943"},{"name":"http://drupalcode.org/project/finder.git/commit/758fcf9","refsource":"CONFIRM","url":"http://drupalcode.org/project/finder.git/commit/758fcf9"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2012-6645","datePublished":"2014-04-08T14:00:00.000Z","dateReserved":"2014-04-08T00:00:00.000Z","dateUpdated":"2024-08-06T21:36:01.914Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-04-08 14:22:09","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"ECAB5556-2D6A-4724-8A8C-33A9A56CAB2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"ABC2F8E7-8831-4245-AC98-B6E9BDD5BFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha10:*:*:*:*:*:*","matchCriteriaId":"CA4D18A4-7BE0-429D-92F4-9D36AF0B544B"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha11:*:*:*:*:*:*","matchCriteriaId":"EC31DF6C-43DC-4D14-9652-131E1F6D6087"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha12:*:*:*:*:*:*","matchCriteriaId":"6C710A9C-492C-420B-846C-88915EC81EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha13:*:*:*:*:*:*","matchCriteriaId":"63B0B97E-8B43-4C04-9CD2-62227946189A"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha14:*:*:*:*:*:*","matchCriteriaId":"D5CB5802-F368-4F45-91F6-5BF7EADD33CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha15:*:*:*:*:*:*","matchCriteriaId":"F63A4E57-90ED-4B43-AA57-039A07C3BF7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha16:*:*:*:*:*:*","matchCriteriaId":"6A8E9D3A-0C79-4650-B403-8F0A286E66E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha17:*:*:*:*:*:*","matchCriteriaId":"959616EB-EFC3-409B-973F-6F7FE30C0741"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha18:*:*:*:*:*:*","matchCriteriaId":"F7154E41-8216-4561-90F2-F8FD7713CE4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha19:*:*:*:*:*:*","matchCriteriaId":"601A9856-5A88-4DE1-B751-FA9320806100"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"6D7FA592-38C3-40CE-B6D0-B6511C497E41"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha20:*:*:*:*:*:*","matchCriteriaId":"5D802E6B-2B2B-4703-90BC-B2E0DD0E8012"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha21:*:*:*:*:*:*","matchCriteriaId":"3C41609E-4A2B-44F9-9F74-B29BF3628EBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha22:*:*:*:*:*:*","matchCriteriaId":"70ED9990-E62B-4F7A-8756-850208DECF3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha23:*:*:*:*:*:*","matchCriteriaId":"5F3C452B-D50D-4F28-8253-9E48365654F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha24:*:*:*:*:*:*","matchCriteriaId":"EE503058-798A-44F7-8705-027C9C05390D"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha25:*:*:*:*:*:*","matchCriteriaId":"6704B28D-77D1-4718-AD73-570E0F449D9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha26:*:*:*:*:*:*","matchCriteriaId":"854B028B-C6BD-4D20-9A27-306CE1B7A696"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha27:*:*:*:*:*:*","matchCriteriaId":"FC0F76F3-47EB-472D-8822-C4F62455E193"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha28:*:*:*:*:*:*","matchCriteriaId":"D14A7373-21DA-4A75-BCE6-3655237EA80B"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"C8671C56-AE42-427A-B916-99BC2B605F21"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"F67B2F3C-2546-4262-8FE0-91FE9652CDC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"BD1B7808-8DF0-4ED9-A189-DB23ECFD2B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"28E9C8B4-C62E-415A-A819-ABB4594C32DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha7:*:*:*:*:*:*","matchCriteriaId":"2B1748F1-DE07-4914-AB65-F5ED73E5A388"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha8:*:*:*:*:*:*","matchCriteriaId":"FB86F180-7B28-47BB-B964-13AD6BCA0BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:alpha9:*:*:*:*:*:*","matchCriteriaId":"6BDC5314-5AF9-4C99-B296-631AC133C3B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"932C3C72-A9B9-4CA6-8A63-5CBD21080FBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"1DA7DA76-BC39-4589-BDAA-A2BFC9154A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"F187D4E5-9220-49F9-B8B3-ACF0D46E4269"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"91C9EAE1-EF5D-43EC-8B5B-7BA7567E35C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"59968AC8-FE0B-40DF-91E1-450EBD52A406"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:rc3:*:*:*:*:*:*","matchCriteriaId":"38A06CDF-2037-414E-A4AE-E11D2567DFE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:rc4:*:*:*:*:*:*","matchCriteriaId":"765AC4DC-DF43-41C1-8BDB-9F2A066B8B4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:unstable0:*:*:*:*:*:*","matchCriteriaId":"60E03E68-97F5-41DB-82F5-11A04DEB3D46"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:unstable1:*:*:*:*:*:*","matchCriteriaId":"227BB15A-6B03-49A7-9EEC-F858133093AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:unstable2:*:*:*:*:*:*","matchCriteriaId":"DF5F6248-FF35-4D11-AD09-9DC7B0A10CB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:unstable3:*:*:*:*:*:*","matchCriteriaId":"A2A674B0-0A7A-4656-8E06-81C6535F1836"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:unstable4:*:*:*:*:*:*","matchCriteriaId":"1F097AE3-6F40-499E-9735-2C1247D35FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:unstable5:*:*:*:*:*:*","matchCriteriaId":"5AD1CE80-0912-4779-AD8C-196847DE6DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:unstable6:*:*:*:*:*:*","matchCriteriaId":"8F0C9F57-A9B9-4E72-AFB8-011F7018600A"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.0:unstable7:*:*:*:*:*:*","matchCriteriaId":"1E12F832-D8E5-4433-9BFD-4B8FC8F803B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"EF325929-15E9-4CE6-BAD7-9685A6DD350A"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"0DA87F37-0629-4700-A864-43DE48FFDF06"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"6A1C3EA1-656B-4E64-8057-E4FA1ED48BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"D561F6AD-1025-4CB1-8C89-15EE00D1780E"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"9B238BF6-95CC-4225-808F-EC564722D714"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"0C4696C0-CAE6-4DA8-982F-D69508EBF885"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.7:*:*:*:*:*:*:*","matchCriteriaId":"69F7E6CD-F36E-4940-818B-14B0553DE6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.8:*:*:*:*:*:*:*","matchCriteriaId":"A11B39CD-79B6-45D9-B74F-119F1ECADBAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.9:*:*:*:*:*:*:*","matchCriteriaId":"629C326F-3083-4B54-8B8F-CB3ADDB86697"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.10:*:*:*:*:*:*:*","matchCriteriaId":"400B9BD7-526F-4262-9C15-A62EEAC398AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.11:*:*:*:*:*:*:*","matchCriteriaId":"58331DD3-9F51-425F-B9CC-E6CD5098730A"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.12:*:*:*:*:*:*:*","matchCriteriaId":"E70BA3DC-29D2-4B5D-AB77-F671C7096F60"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.13:*:*:*:*:*:*:*","matchCriteriaId":"6D5F259A-70DC-4B86-BDD1-BF9769D09278"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.14:*:*:*:*:*:*:*","matchCriteriaId":"7EA6D683-62E9-45D7-B976-BA95A572D66A"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.15:*:*:*:*:*:*:*","matchCriteriaId":"5F773036-717B-4C9E-96AE-C53A4AD96412"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.16:*:*:*:*:*:*:*","matchCriteriaId":"DC29EDE4-EB3E-4D55-A9F9-0E3EDAD3AEC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.17:*:*:*:*:*:*:*","matchCriteriaId":"FD9A8C3A-3333-4FA0-9062-2A32CECF7EC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.18:*:*:*:*:*:*:*","matchCriteriaId":"7F0745EC-1BFA-436A-932B-E2F37D0751C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.19:*:*:*:*:*:*:*","matchCriteriaId":"4B457A70-D5CF-40D5-AE1D-C9FA2641C267"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.20:*:*:*:*:*:*:*","matchCriteriaId":"FD002F99-26D4-4CB1-8671-3DB5A7BFFA72"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.21:*:*:*:*:*:*:*","matchCriteriaId":"9CD0B4E2-335D-40D3-842B-2DFD37473CD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.23:*:*:*:*:*:*:*","matchCriteriaId":"C0761F17-D755-4D69-9E11-EC069C8E7320"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.24:*:*:*:*:*:*:*","matchCriteriaId":"01CC175F-60EA-4747-B2BA-EE6F27256095"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.25:*:*:*:*:*:*:*","matchCriteriaId":"BCD2C47F-5CFE-4766-BCF4-35B0B8BBBC8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:6.x-1.x-dev:*:*:*:*:*:*:*","matchCriteriaId":"8738229B-A0E2-4F6A-873C-10F852C5B670"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-1.0:*:*:*:*:*:*:*","matchCriteriaId":"BDE8A932-C637-43A8-ACA2-3465A700D50D"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-1.1:*:*:*:*:*:*:*","matchCriteriaId":"E811DDE5-C168-4458-9238-CD581A0DCDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-1.2:*:*:*:*:*:*:*","matchCriteriaId":"C2F513BF-9AF4-469B-BC10-CAA04F6E53FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-1.3:*:*:*:*:*:*:*","matchCriteriaId":"08839998-1373-4900-8A5D-31739F690587"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-1.4:*:*:*:*:*:*:*","matchCriteriaId":"E7433E00-08F8-473E-8091-A7907983778F"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-1.5:*:*:*:*:*:*:*","matchCriteriaId":"2A2E062F-8CC4-4EBE-A628-963C3CB325BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-1.6:*:*:*:*:*:*:*","matchCriteriaId":"B2C414FE-8E57-4F51-92BE-A73D5B087132"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-1.x:dev:*:*:*:*:*:*","matchCriteriaId":"A3678827-41F8-4190-9B3A-1FB244681D82"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-2.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"0A645395-F59B-44A3-B7D8-3DB4C69A890D"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-2.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"914F133C-D035-4481-9868-BBF264FE1344"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-2.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"48127582-98BA-41EA-9701-2EF78919624B"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-2.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"E0CF6C6A-AF5A-4DC5-9A55-2361A6776CD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-2.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"33FF98EE-F5BA-44B1-A2AF-32182A0788B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-2.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"144724D3-4DFD-4882-A146-2B9207AC950C"},{"vulnerable":true,"criteria":"cpe:2.3:a:danielb:finder:7.x-2.x:dev:*:*:*:*:*:*","matchCriteriaId":"07907C37-E6E2-4B85-B209-6C474F349762"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"6645","Ordinal":"1","Title":"CVE-2012-6645","CVE":"CVE-2012-6645","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"6645","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via the title of a node, a different vulnerability than CVE-2012-1561.","Type":"Description","Title":"CVE-2012-6645"},{"CveYear":"2012","CveId":"6645","Ordinal":"2","NoteData":"2014-04-08","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"6645","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}