Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via the title of a node, a different vulnerability than CVE-2012-1561.
结论预警: CVE-2012-6645 综合评估为高可利用风险（61.8/100）：CVSS 技术影响为中级，利用概率（EPSS 2.75%） 核心证据: 已收录 1 条公开利用参考（Exploit-DB）。 强制指令: 存在公开利用—请排查暴露面、落实缓解措施并优先修补。
风险随态势动态变化；本站持续评估并同步更新本页展示内容。
| EDB-ID | 来源 | 类型 | 公开时间 | 链接 |
|---|---|---|---|---|
| — | nvd_ref | exploit_tag | Exploit-DB ↗ |
EPSS 日更估计相对被利用可能性；百分位表示该 CVE 在已评分漏洞中的相对排名（越高表示相对更严重）。
| # | 日期 | 旧 EPSS 分数 | 新 EPSS 分数 | 变化（新 − 旧） |
|---|---|---|---|---|
| 1 | 2026-07-03 | 2.73% | 2.75% | +0.02% |
| 2 | 2026-06-15 | 0.95% | 2.73% | +1.78% |
| 3 | 2025-03-30 | — | 0.95% | — |
完整 EPSS 历史 （共 8 条）
该 CVE 的 CVSS 指标。
| 底座分 | 版本 | 严重度 | 向量 | 可利用性 | 影响 | 分数来源 |
|---|---|---|---|---|---|---|
| 4.3 | 2.0 | MEDIUM |
|
8.6 | 2.9 | [email protected] |
| 厂商 | 产品 | 版本 | 原始 CPE |
|---|---|---|---|
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha1:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha10:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha11:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha12:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha13:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha14:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha15:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha16:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha17:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha18:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha19:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha2:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha20:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha21:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha22:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha23:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha24:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha25:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha26:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha27:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha28:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha3:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha4:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha5:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha6:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha7:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha8:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha9:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:beta1:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:beta2:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:beta3:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:rc1:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:rc2:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:rc3:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:rc4:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable0:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable1:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable2:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable3:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable4:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable5:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable6:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable7:*:*:*:*:*:* |
| danielb | finder | 6.x-1.1 | cpe:2.3:a:danielb:finder:6.x-1.1:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.2 | cpe:2.3:a:danielb:finder:6.x-1.2:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.3 | cpe:2.3:a:danielb:finder:6.x-1.3:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.4 | cpe:2.3:a:danielb:finder:6.x-1.4:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.5 | cpe:2.3:a:danielb:finder:6.x-1.5:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.6 | cpe:2.3:a:danielb:finder:6.x-1.6:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.7 | cpe:2.3:a:danielb:finder:6.x-1.7:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.8 | cpe:2.3:a:danielb:finder:6.x-1.8:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.9 | cpe:2.3:a:danielb:finder:6.x-1.9:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.10 | cpe:2.3:a:danielb:finder:6.x-1.10:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.11 | cpe:2.3:a:danielb:finder:6.x-1.11:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.12 | cpe:2.3:a:danielb:finder:6.x-1.12:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.13 | cpe:2.3:a:danielb:finder:6.x-1.13:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.14 | cpe:2.3:a:danielb:finder:6.x-1.14:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.15 | cpe:2.3:a:danielb:finder:6.x-1.15:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.16 | cpe:2.3:a:danielb:finder:6.x-1.16:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.17 | cpe:2.3:a:danielb:finder:6.x-1.17:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.18 | cpe:2.3:a:danielb:finder:6.x-1.18:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.19 | cpe:2.3:a:danielb:finder:6.x-1.19:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.20 | cpe:2.3:a:danielb:finder:6.x-1.20:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.21 | cpe:2.3:a:danielb:finder:6.x-1.21:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.23 | cpe:2.3:a:danielb:finder:6.x-1.23:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.24 | cpe:2.3:a:danielb:finder:6.x-1.24:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.25 | cpe:2.3:a:danielb:finder:6.x-1.25:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.x-dev | cpe:2.3:a:danielb:finder:6.x-1.x-dev:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.0 | cpe:2.3:a:danielb:finder:7.x-1.0:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.1 | cpe:2.3:a:danielb:finder:7.x-1.1:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.2 | cpe:2.3:a:danielb:finder:7.x-1.2:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.3 | cpe:2.3:a:danielb:finder:7.x-1.3:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.4 | cpe:2.3:a:danielb:finder:7.x-1.4:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.5 | cpe:2.3:a:danielb:finder:7.x-1.5:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.6 | cpe:2.3:a:danielb:finder:7.x-1.6:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.x | cpe:2.3:a:danielb:finder:7.x-1.x:dev:*:*:*:*:*:* |
| danielb | finder | 7.x-2.0 | cpe:2.3:a:danielb:finder:7.x-2.0:alpha1:*:*:*:*:*:* |
| danielb | finder | 7.x-2.0 | cpe:2.3:a:danielb:finder:7.x-2.0:alpha2:*:*:*:*:*:* |
| danielb | finder | 7.x-2.0 | cpe:2.3:a:danielb:finder:7.x-2.0:alpha3:*:*:*:*:*:* |