CVE-2012-1561

Cross-site scripting (XSS) vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "checkbox and radio button functionalities."

• CWE-79

• http://drupal.org/node/1432318
• http://drupal.org/node/1432320
• http://drupalcode.org/project/finder.git/commit/13e2d0c
• http://drupalcode.org/project/finder.git/commit/58443aa
• http://secunia.com/advisories/47941
• http://secunia.com/advisories/47943Vendor Advisory
• http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities
• http://www.openwall.com/lists/oss-security/2012/03/16/9
• http://www.openwall.com/lists/oss-security/2012/03/19/9
• http://www.openwall.com/lists/oss-security/2012/04/07/1
• http://www.osvdb.org/79015
• https://drupal.org/node/1432970Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73110
• http://drupal.org/node/1432318
• http://drupal.org/node/1432320
• http://drupalcode.org/project/finder.git/commit/13e2d0c
• http://drupalcode.org/project/finder.git/commit/58443aa
• http://secunia.com/advisories/47941
• http://secunia.com/advisories/47943Vendor Advisory
• http://www.madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities
• http://www.openwall.com/lists/oss-security/2012/03/16/9
• http://www.openwall.com/lists/oss-security/2012/03/19/9
• http://www.openwall.com/lists/oss-security/2012/04/07/1
• http://www.osvdb.org/79015
• https://drupal.org/node/1432970Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73110

Published

Apr 8, 2014

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1543Unspecified vulnerability in the JavaFX component in Oracle …
• CVE-2012-1544Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2012-1545Microsoft Internet Explorer 6 through 9, and 10 Consumer Pre…
• CVE-2012-1556Cross-site scripting (XSS) vulnerability in Synology Photo S…
• CVE-2012-1557SQL injection vulnerability in admin/plib/api-rpc/Agent.php …
• CVE-2012-1558yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a…
• CVE-2012-1562Joomla! core before 2.5.3 allows unauthorized password chang…7.5
• CVE-2012-1563Joomla! before 2.5.3 allows Admin Account Creation.7.5
• CVE-2012-1564Cross-site scripting (XSS) vulnerability in administration/c…
• CVE-2012-1565Unspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4…
• CVE-2012-1566LinuxMint as of 2012-03-19 has temporary file creation vulne…7.5
• CVE-2012-1567LinuxMint as of 2012-03-19 has temporary file creation vulne…7.5