951 matches found
CVE-2012-6573
CVE-2012-6573 is a cross-site scripting (XSS) vulnerability in the Drupal Solr Autocomplete module. Affected versions are Apache Solr Autocomplete 6.x-1.x prior to 6.x-1.4 and 7.x-1.x prior to 7.x-1.3, where user input in autocomplete results could inject arbitrary script/HTML. The root cause is ...
PT-2013-2027
Name of the Vulnerable Software and Affected Versions Apache Solr Autocomplete module versions 6.x-1.x before 6.x-1.4 Apache Solr Autocomplete module versions 7.x-1.x before 7.x-1.3 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject...
CVE-2012-6573: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving autocomplete results...
SA-CONTRIB-2012-136 - Apache Solr Search Autocomplete - Cross Site Scripting (XSS)
Apache Solr Search Autocomplete module enables you to add autocomplete capabilities to the search text field for the Apache Solr Search Integration module. The module doesn't sufficiently filter the autocomplete results sent back from the Drupal site, so under the scenario where someone provided ...
Cross site scripting
Cross-site scripting XSS vulnerability in the Apache Solr Search solr extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-3821
Cross-site scripting XSS vulnerability in the Apache Solr Search solr extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-3821
Cross-site scripting XSS vulnerability in the Apache Solr Search solr extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-3821
CVE-2009-3821 is an XSS vulnerability affecting the TYPO3 Apache Solr extension (solr) version 1.0.0. Multiple connected sources confirm an Eiffel of cross-site scripting that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The root cause details are not el...
CVE-2009-3821: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Apache Solr Search solr extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
TYPO3 Security Bulletin
Several vulnerabilities have been found in the following third party TYPO3 extensions: Apache Solr Search solr, Random Images maagrandomimage, Flagbit Filebase fbfilebase, freeCap CAPTCHA srfreecap Release Date: Oktober 20, 2009 Please read first: This Collective Security Bulletin CSB is a listin...