CVE-2012-5590

The CVE-2012-5590 issue affects the Drupal Webmail Plus contributed module. The vulnerability is a SQL injection caused by insufficient sanitization of user input used in a database query, allowing remote attackers to execute arbitrary SQL commands. Affected: all Webmail Plus module versions. Imp...

SA-CONTRIB-2012-171 - Webmail Plus - SQL injection - (unsupported)

The Webmail plus module is a full-featured email client for Drupal. It's designed to provide email for any or all members of a Drupal site. The module doesn't sufficiently sanitize user input as it is used in a database query. CVE: CVE-2012-5590 Versions affected All Webmail Plus module versions...