CVE-2012-6574

The CVE-2012-6574 entry pertains to the Fonecta verify module for Drupal (7.x-1.x) prior to 7.x-1.6, where an XSS vulnerability exists due to unsanitized data retrieved from an untrusted third-party source. The vulnerability affects Fonecta verify 7.x-1.x versions before 7.x-1.6, enabling remote ...

SA-CONTRIB-2012-144 Fonecta verify - Cross Site Scripting (XSS)

Fonecta verify provides an interface to retrieve information from the Finnish Fonecta company information database. The module contains an arbitrary script injection vulnerability XSS due to the fact that it fails to sanitize data retrieved from an untrusted third party source. This vulnerability...