CVE-2012-5540

Multiple cross-site scripting XSS vulnerabilities in the Hostip module 6.x-2.x before 6.x-2.2 and 7.x-2.x before 7.x-2.2 for Drupal allow remote attackers with control of hostip.info to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-5540

The CVE-2012-5540 issue affects the Drupal Hostip module (6.x-2.x before 6.x-2.2 and 7.x-2.x before 7.x-2.2). Root cause: data sourced from an untrusted third party (hostip.info) is not sanitized, enabling cross-site scripting (XSS). Impact: remote attackers can inject arbitrary script/HTML via u...

SA-CONTRIB-2012-149 - Hostip - Cross Site Scripting (XSS)

Hostip enables you to query the http://www.hostip.info/ API to get the country / state information based on the user's IP address or a specific IP passed to it. The module fails to sanitize data retrieved from an untrusted third party source, thereby exposing an arbitrary script injection...