CVE-2012-2059

Cross-site scripting XSS vulnerability in the ticketyboo News Ticker module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2059

Cross-site scripting XSS vulnerability in the ticketyboo News Ticker module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2059

CVE-2012-2059 affects the ticketyboo News Ticker module for Drupal. The issue is an XSS vulnerability from unsanitized output (and possible SQL injection per Drupal security advisory), allowing remote attackers to inject arbitrary scripts/HTML. No fixes were released for this module. Mitigation: ...