CVE-2012-5569

Multiple cross-site scripting XSS vulnerabilities in the Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via a 1 page title or 2 crafted email message...

CVE-2012-5569

CVE-2012-5569 affects the Drupal Basic webmail module (6.x-1.x prior to 6.x-1.2). The root cause is several XSS flaws that allow remote attackers to inject arbitrary script/HTML via the page title or crafted email messages. Impact is limited to sites using this contributed module; successful expl...

CVE-2012-5569

Multiple cross-site scripting XSS vulnerabilities in the Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via a 1 page title or 2 crafted email message...