CVE-2012-2717: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Mobile Tools module 6.x-2.x before 6.x-2.3 for Drupal allow remote attackers to inject arbitrary web script or HTML via the 1 Mobile URL field or 2 Desktop URL field to the General configuration page, or the 3 message to the Mobile Tools...

PT-2012-4207

Name of the Vulnerable Software and Affected Versions Drupal Mobile Tools module versions 6.x-2.x before 6.x-2.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific fields, including the Mobile URL field, Desktop URL field to the General configuration...