GCVE - cpe:2.3:a:danielb:finder:7.x-1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:danielb:finder:7.x-1.0:*:*:*:*:*:*:*

part: a version: 7.x-1.0 update: *

Vendor	Danielb (`43c7de0f-27ab-5928-a373-dab2ae99afca`)
Product	Finder (`b12096ce-0ce9-5786-b445-6c3c12cc5456`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-6645`	vulnerable	2026-06-08 05:03:01.429675	Details available Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via the title of a node, a different vulnerability than CVE-2012-1561. Published: 2014-04-08T14:00:00.000Z Updated: 2024-08-06T21:36:01.914Z Open on db.gcve.eu Reference links http://drupal.org/node/1432320 http://drupal.org/node/1432318 http://www.openwall.com/lists/oss-security/2012/03/19/9 http://drupalcode.org/project/finder.git/commit/bc0cc82 http://www.osvdb.org/79015	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1641`	vulnerable	2026-06-08 05:00:50.106201	Details available The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote authenticated users with the administer finder permission to execute arbitrary PHP code via admin/build/finder/import. Published: 2012-08-28T16:00:00.000Z Updated: 2024-09-16T17:48:22.805Z Open on db.gcve.eu Reference links http://drupal.org/node/1432320 http://www.osvdb.org/79014 http://drupal.org/node/1432318 http://www.openwall.com/lists/oss-security/2012/03/19/9 http://drupalcode.org/project/finder.git/commit/bc0cc82	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1561`	vulnerable	2026-06-08 05:00:49.393205	Details available Cross-site scripting (XSS) vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "checkbox and radio button functionalities." Published: 2014-04-08T14:00:00.000Z Updated: 2024-08-06T19:01:02.803Z Open on db.gcve.eu Reference links http://drupal.org/node/1432320 http://drupal.org/node/1432318 http://www.openwall.com/lists/oss-security/2012/03/19/9 http://www.osvdb.org/79015 http://www.openwall.com/lists/oss-security/2012/03/16/9	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.