Apache Solr < 5.3.1 XSS

Binary data 8990.prm...

Apache Solr < 5.3 'schema-browse' XSS

Binary data 8983.prm...

Apache Solr < 5.1 Multiple XSS

Binary data 8975.prm...

Apache Solr < 4.10.5 'plugin.js' XSS

Binary data 8974.prm...

Apache Solr Detection

Binary data 8966.prm...

Apache Solr Version Detection

Binary data 8967.prm...

CVE-2015-5506

The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote attackers to obtain information about unpublished content via a search...

Code injection

The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote attackers to obtain information about unpublished content via a search...

CVE-2015-5506

The vulnerability CVE-2015-5506 affects the Drupal Apache Solr Real-Time module (7.x-1.x) prior to 7.x-1.2. The root cause is that the module does not check the status of an entity when indexing, allowing remote attackers to retrieve information about unpublished content through search results. I...

CVE-2015-5506

The Apache Solr Real-Time module 7.x-1.x before 7.x-1.2 for Drupal does not check the status of an entity when indexing, which allows remote attackers to obtain information about unpublished content via a search...

ECE Projects 'tx_solr[q]' Parameter Cross-Site Scripting Vulnerability

ECE Projects is a project management application. ECE Projects handles a cross-site scripting vulnerability in the 'txsolrq' parameter, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or...

Drupal Apache Solr Real-Time Module Access Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Apache Solr Real-Time is one of the search engine modules. An access bypass vulnerability exists in the Drupal Apache Solr Real-Time module in versions 7.x-1.2 prior to 7.x-1.x. An...

Apache Solr Real-Time - Critical - Access Bypass - SA-CONTRIB-2015-119

This module allows content-changes to be committed to Apache Solr in real-time. The module doesn't check the status of an entity being indexed which means that unpublished content will get indexed by Solr and the title and partial content may be exposed to any user who has permission to search si...

drf.com XSS vulnerability

Open Bug Bounty ID: OBB-66029 Description| Value ---|--- Affected Website:| drf.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Extract Metadata From Files: ImageCat

Extract Metadata From Files This is an OODT RADIX application that uses Apache Solr , Apache Tika and Apache OODT to ingest 10s of millions of files images,but could be extended to other files in place, and to extract metadata and OCR information from those files/images using Tika and Tesseract O...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality and accessibility of protected information

The multiple vulnerabilities in the lucene-solr package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality and accessibility of protected information. These vulnerabilities can be exploited remotely...

Apache Solr < 4.10.5 'plugin.js' XSS

The version of Apache Solr running on the remote web server is affected by a persistent cross-site scripting vulnerability due to a failure to sanitize query histories before returning them to the user of the Solr administration panel. A remote, unauthenticated attacker can exploit this issue to...

Apache Solr Cross-Site Scripting Vulnerability

Apache Solr is an open source search server. A cross-site scripting vulnerability in the Admin UI Plugin / Stats page in version 4.x of Apache Solr prior to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via fieldvaluecache objects...

CVE-2014-3628

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...

CVE-2014-3628

Cross-site scripting XSS vulnerability in the Admin UI Plugin / Stats page in Apache Solr 4.x before 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the fieldvaluecache object...