CVE-2013-6289

The CVE-2013-6289 issue affects the Apache Solr for TYPO3 (solr) extension prior to version 2.8.3. The vulnerability is a Cross-site Scripting (XSS) flaw that lets remote attackers inject arbitrary web script or HTML via unspecified vectors. Affected product: TYPO3 extension Solr; root cause: ins...

CVE-2013-6288

CVE-2013-6288: A vulnerability in the Apache Solr for TYPO3 (solr) extension prior to 2.8.3 for TYPO3 is due to insecure unserialize. The TYPO3 security bulletin confirms affected versions up to 2.8.2 and documents remediation by releasing version 2.8.3. Other sources reiterate the same issue and...

Several vulnerabilities in extension Apache Solr for TYPO3 (solr)

It has been discovered that the extension "Apache Solr for TYPO3" solr is vulnerable to Cross-Site Scripting and Insecure Unserialize. Release Date: September 25, 2013 Bulletin Update: November 06, 2014 added CVEs Component Type: Third party extension. This extension is not a part of the TYPO3...

CVE-2012-6573

Cross-site scripting XSS vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving autocomplete results...

Cross site scripting

Cross-site scripting XSS vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving autocomplete results...

CVE-2012-6573

Cross-site scripting XSS vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving autocomplete results...

CVE-2012-6573

CVE-2012-6573 is a cross-site scripting (XSS) vulnerability in the Drupal Solr Autocomplete module. Affected versions are Apache Solr Autocomplete 6.x-1.x prior to 6.x-1.4 and 7.x-1.x prior to 7.x-1.3, where user input in autocomplete results could inject arbitrary script/HTML. The root cause is ...

SA-CONTRIB-2012-136 - Apache Solr Search Autocomplete - Cross Site Scripting (XSS)

Apache Solr Search Autocomplete module enables you to add autocomplete capabilities to the search text field for the Apache Solr Search Integration module. The module doesn't sufficiently filter the autocomplete results sent back from the Drupal site, so under the scenario where someone provided ...

Adobe Coldfusion Solr Service Information Disclosure

Adobe ColdFusion Solr Service Information Disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

SourceForge open sources its own source !

SourceForge, the popular project hosting site, has released Allura, the software that powers its service, as Apache 2.0 licensed open source. The project to develop Allura began in 2009 and currently an instance of the software, which has also been known as "New Forge" or "Forge 2.0" during...

CVE-2010-0185

The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which allows remote attackers to obtain collection metadata, search information, and index data via a request to an unspecified URL...

Default configuration

The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which allows remote attackers to obtain collection metadata, search information, and index data via a request to an unspecified URL...

CVE-2010-0185

The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which allows remote attackers to obtain collection metadata, search information, and index data via a request to an unspecified URL...

CVE-2009-3821

Cross-site scripting XSS vulnerability in the Apache Solr Search solr extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Apache Solr Search solr extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3821

Cross-site scripting XSS vulnerability in the Apache Solr Search solr extension 1.0.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3821

CVE-2009-3821 is an XSS vulnerability affecting the TYPO3 Apache Solr extension (solr) version 1.0.0. Multiple connected sources confirm an Eiffel of cross-site scripting that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The root cause details are not el...

TYPO3 Security Bulletin

Several vulnerabilities have been found in the following third party TYPO3 extensions: Apache Solr Search solr, Random Images maagrandomimage, Flagbit Filebase fbfilebase, freeCap CAPTCHA srfreecap Release Date: Oktober 20, 2009 Please read first: This Collective Security Bulletin CSB is a listin...