Finder CVE-2012-6645 Cross-Site Scripting Vulnerability

Bugtraq ID:	73656
Class:	Input Validation Error
CVE:	CVE-2012-6645
Remote:	Yes
Local:	No
Published:	Apr 08 2014 12:00AM
Updated:	Apr 08 2014 12:00AM
Credit:	Unknown
Vulnerable:	Danielb Finder 7.X-2.X Dev Danielb Finder 7.X-2.0 Alpha6 Danielb Finder 7.X-2.0 Alpha5 Danielb Finder 7.X-2.0 Alpha4 Danielb Finder 7.X-2.0 Alpha3 Danielb Finder 7.X-2.0 Alpha2 Danielb Finder 7.X-2.0 Alpha1 Danielb Finder 7.X-1.X Dev Danielb Finder 7.x-1.6 Danielb Finder 7.x-1.5 Danielb Finder 7.x-1.4 Danielb Finder 7.x-1.3 Danielb Finder 7.x-1.2 Danielb Finder 7.x-1.1 Danielb Finder 7.x-1.0 Danielb Finder 6.X-1.X-Dev Danielb Finder 6.x-1.9 Danielb Finder 6.x-1.8 Danielb Finder 6.x-1.7 Danielb Finder 6.x-1.6 Danielb Finder 6.x-1.5 Danielb Finder 6.x-1.4 Danielb Finder 6.x-1.3 Danielb Finder 6.X-1.25 Danielb Finder 6.x-1.24 Danielb Finder 6.X-1.23 Danielb Finder 6.x-1.21 Danielb Finder 6.x-1.20 Danielb Finder 6.X-1.2 Danielb Finder 6.x-1.19 Danielb Finder 6.x-1.18 Danielb Finder 6.x-1.17 Danielb Finder 6.x-1.16 Danielb Finder 6.x-1.15 Danielb Finder 6.x-1.14 Danielb Finder 6.x-1.13 Danielb Finder 6.x-1.12 Danielb Finder 6.x-1.11 Danielb Finder 6.x-1.10 Danielb Finder 6.x-1.1 Danielb Finder 6.X-1.0 Unstable7 Danielb Finder 6.X-1.0 Unstable6 Danielb Finder 6.X-1.0 Unstable5 Danielb Finder 6.X-1.0 Unstable4 Danielb Finder 6.X-1.0 Unstable3 Danielb Finder 6.X-1.0 Unstable2 Danielb Finder 6.X-1.0 Unstable1 Danielb Finder 6.X-1.0 Unstable0 Danielb Finder 6.X-1.0 Rc4 Danielb Finder 6.X-1.0 Rc3 Danielb Finder 6.X-1.0 Rc2 Danielb Finder 6.X-1.0 Rc1 Danielb Finder 6.X-1.0 Beta3 Danielb Finder 6.X-1.0 Beta2 Danielb Finder 6.X-1.0 Beta1 Danielb Finder 6.X-1.0 Alpha9 Danielb Finder 6.X-1.0 Alpha8 Danielb Finder 6.X-1.0 Alpha7 Danielb Finder 6.X-1.0 Alpha6 Danielb Finder 6.X-1.0 Alpha5 Danielb Finder 6.X-1.0 Alpha4 Danielb Finder 6.X-1.0 Alpha3 Danielb Finder 6.X-1.0 Alpha28 Danielb Finder 6.X-1.0 Alpha27 Danielb Finder 6.X-1.0 Alpha26 Danielb Finder 6.X-1.0 Alpha25 Danielb Finder 6.X-1.0 Alpha24 Danielb Finder 6.X-1.0 Alpha23 Danielb Finder 6.X-1.0 Alpha22 Danielb Finder 6.X-1.0 Alpha21 Danielb Finder 6.X-1.0 Alpha20 Danielb Finder 6.X-1.0 Alpha2 Danielb Finder 6.X-1.0 Alpha19 Danielb Finder 6.X-1.0 Alpha18 Danielb Finder 6.X-1.0 Alpha17 Danielb Finder 6.X-1.0 Alpha16 Danielb Finder 6.X-1.0 Alpha15 Danielb Finder 6.X-1.0 Alpha14 Danielb Finder 6.X-1.0 Alpha13 Danielb Finder 6.X-1.0 Alpha12 Danielb Finder 6.X-1.0 Alpha11 Danielb Finder 6.X-1.0 Alpha10 Danielb Finder 6.X-1.0 Alpha1 Danielb Finder 6.X-1.0
Not Vulnerable:

Finder CVE-2012-6645 Cross-Site Scripting Vulnerability

Finder is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via the title of a node, a different vulnerability than CVE-2012-1561.

Finder CVE-2012-6645 Cross-Site Scripting Vulnerability

References:

• finder - For more information about this repository, visit the project page at h (CONFIRM)
  
• finder - For more information about this repository, visit the project page at h (CONFIRM)
  
• finder - For more information about this repository, visit the project page at h (CONFIRM)
  
• finder - For more information about this repository, visit the project page at h (CONFIRM)
  
• finder 7.x-2.0-alpha8 | Drupal.org (CONFIRM)
  
• http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-executio (MISC)
  
• IBM X-Force Exchange Beta (XF)
  
• oss-security - CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignm (MLIST)
  
• oss-security - CVE-request: Drupal Finder SA-CONTRIB-2012-017 (MLIST)
  
• oss-security - Re: CVE-request: Drupal Finder SA-CONTRIB-2012-017 (MLIST)
  
• SA-CONTRIB-2012-017 - Finder - Multiple vulnerabilities | Drupal.org (MISC)
  
• Welcome to Drupal.org | Drupal.org (CONFIRM)