886 matches found
PT-2013-1143 · Apache · Apache Solr
Name of the Vulnerable Software and Affected Versions: Apache Solr versions prior to 4.3.1 Description: The issue is related to the DocumentAnalysisRequestHandler in Apache Solr, which does not properly use the EmptyEntityResolver. This allows remote attackers to have an unspecified impact via XM...
CVE-2013-6397: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in SolrResourceLoader in Apache Solr before 4.6 allows remote attackers to read arbitrary files via a .. dot dot or full pathname in the tr parameter to solr/select/, when the response writer wt parameter is set to XSLT. NOTE: this can be leveraged using a separa...
CVE-2013-6289
Cross-site scripting XSS vulnerability in the Apache Solr for TYPO3 solr extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6288
Unspecified vulnerability in the Apache Solr for TYPO3 solr extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."...
Design/Logic Flaw
Unspecified vulnerability in the Apache Solr for TYPO3 solr extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."...
Cross site scripting
Cross-site scripting XSS vulnerability in the Apache Solr for TYPO3 solr extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6289
Cross-site scripting XSS vulnerability in the Apache Solr for TYPO3 solr extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6288
Unspecified vulnerability in the Apache Solr for TYPO3 solr extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."...
CVE-2013-6289
The CVE-2013-6289 issue affects the Apache Solr for TYPO3 (solr) extension prior to version 2.8.3. The vulnerability is a Cross-site Scripting (XSS) flaw that lets remote attackers inject arbitrary web script or HTML via unspecified vectors. Affected product: TYPO3 extension Solr; root cause: ins...
CVE-2013-6288
CVE-2013-6288: A vulnerability in the Apache Solr for TYPO3 (solr) extension prior to 2.8.3 for TYPO3 is due to insecure unserialize. The TYPO3 security bulletin confirms affected versions up to 2.8.2 and documents remediation by releasing version 2.8.3. Other sources reiterate the same issue and...
CVE-2013-6289: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Apache Solr for TYPO3 solr extension before 2.8.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6288: Undefined Security Weakness
Unspecified vulnerability in the Apache Solr for TYPO3 solr extension before 2.8.3 for TYPO3 has unknown impact and remote attack vectors, related to "Insecure Unserialize."...
Several vulnerabilities in extension Apache Solr for TYPO3 (solr)
It has been discovered that the extension "Apache Solr for TYPO3" solr is vulnerable to Cross-Site Scripting and Insecure Unserialize. Release Date: September 25, 2013 Bulletin Update: November 06, 2014 added CVEs Component Type: Third party extension. This extension is not a part of the TYPO3...
CVE-2012-6573
Cross-site scripting XSS vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving autocomplete results...
Cross site scripting
Cross-site scripting XSS vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving autocomplete results...
CVE-2012-6573
Cross-site scripting XSS vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving autocomplete results...
CVE-2012-6573
CVE-2012-6573 is a cross-site scripting (XSS) vulnerability in the Drupal Solr Autocomplete module. Affected versions are Apache Solr Autocomplete 6.x-1.x prior to 6.x-1.4 and 7.x-1.x prior to 7.x-1.3, where user input in autocomplete results could inject arbitrary script/HTML. The root cause is ...
CVE-2012-6573: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving autocomplete results...
SA-CONTRIB-2012-136 - Apache Solr Search Autocomplete - Cross Site Scripting (XSS)
Apache Solr Search Autocomplete module enables you to add autocomplete capabilities to the search text field for the Apache Solr Search Integration module. The module doesn't sufficiently filter the autocomplete results sent back from the Drupal site, so under the scenario where someone provided ...