9 matches found
EUVD-2012-5439
Malware in sbrugna...
CVE-2015-6752
Cross-site scripting XSS vulnerability in the Search API Autocomplete module 7.x-1.x before 7.x-1.3 for Drupal, when the search index is configured to use the HTML filter processor, allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified...
CVE-2025-3907
Cross-Site Request Forgery CSRF vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9...
CVE-2025-3907 Search API Solr - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-046
Cross-Site Request Forgery CSRF vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9...
CVE-2025-3907 Search API Solr - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-046
Cross-Site Request Forgery CSRF vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9...
PT-2025-17661 · Drupal · Drupal Search Api Solr
Name of the Vulnerable Software and Affected Versions: Drupal Search API Solr versions 0.0.0 through 4.3.8 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed. This issue can be exploited to perform actions on behalf of another...
Multiple vulnerabilities in the Drupal Search API module
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Search API is one of the framework modules used to create search functionality for any Entity of Drupal. Information disclosure vulnerabilities, cross-site scripting vulnerabilities, an...
PT-2012-6017
Name of the Vulnerable Software and Affected Versions Drupal Search API module versions 7.x-1.x before 7.x-1.3 Description The issue allows remote attackers to hijack the authentication of administrators for requests, specifically for actions that enable a server or a search index. Recommendation...
PT-2012-4203
Name of the Vulnerable Software and Affected Versions Drupal Search API module versions 7.x-1.x before 7.x-1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via vectors related to thrown exceptions and logging errors in the Search API module for Drupal,...