NVD

Id
43445  
Name
CVE-2012-1561  
Description
Cross-site scripting (XSS) vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "checkbox and radio button functionalities."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-04-08  
Modified Date
2014-04-08  
Seq
2012-1561  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
218294 43445 CVE-2012-1561 http://drupal.org/node/1432318  View
218295 43445 CVE-2012-1561 http://drupal.org/node/1432320  View
218296 43445 CVE-2012-1561 http://drupalcode.org/project/finder.git/commit/13e2d0c  View
218297 43445 CVE-2012-1561 http://drupalcode.org/project/finder.git/commit/58443aa  View
218298 43445 CVE-2012-1561 http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities  View
218299 43445 CVE-2012-1561 [oss-security] 20120316 CVE-request: Drupal Finder SA-CONTRIB-2012-017  View
218300 43445 CVE-2012-1561 [oss-security] 20120319 Re: CVE-request: Drupal Finder SA-CONTRIB-2012-017  View
218301 43445 CVE-2012-1561 [oss-security] 20120406 CVE"s for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)  View
218302 43445 CVE-2012-1561 drupal-finder-unspecified-xss(73110)  View
218303 43445 CVE-2012-1561 https://drupal.org/node/1432970  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30470 JVNDB-2012-006178 Drupal 用 Finder モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Finder モジュールには、"チェックボックスとラジオボタンの機能" に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-1561 54799 CVE-2012-1561 43445 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006178.html 2012-02-08 2014-04-09 View