EUVD-2013-0219

Malware in sbrugna...

CVE-2013-0181

Cross-site scripting XSS vulnerability in Views in the Search API searchapi module 7.x-1.x before 7.x-1.4 for Drupal, when using certain backends and facets, allows remote attackers to inject arbitrary web script or HTML via unspecified input, which is returned in an error message...

Cross site scripting

Cross-site scripting XSS vulnerability in Views in the Search API searchapi module 7.x-1.x before 7.x-1.4 for Drupal, when using certain backends and facets, allows remote attackers to inject arbitrary web script or HTML via unspecified input, which is returned in an error message...

PT-2013-3884

Name of the Vulnerable Software and Affected Versions Drupal search api module versions 7.x-1.x before 7.x-1.4 Description A cross-site scripting XSS issue exists in the admin view of the Search API module, allowing remote authenticated users with specific permissions to inject arbitrary web scri...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Search API module 7.x-1.x before 7.x-1.3 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable a server via a server action or 2 enable a search index via an enable index action...

PT-2012-6017

Name of the Vulnerable Software and Affected Versions Drupal Search API module versions 7.x-1.x before 7.x-1.3 Description The issue allows remote attackers to hijack the authentication of administrators for requests, specifically for actions that enable a server or a search index. Recommendation...

CVE-2012-2712

CVE-2012-2712 affects Drupal’s Search API module (7.x-1.x) up to version 7.x-1.1. The issue is a failure to sufficiently sanitize user input when throwing exceptions or logging errors, enabling remote attackers to inject arbitrary scripts via crafted URLs. Impact is cross-site scripting (XSS) in ...

PT-2012-4203

Name of the Vulnerable Software and Affected Versions Drupal Search API module versions 7.x-1.x before 7.x-1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to thrown exceptions and logging errors in the Search API module for Drupal,...