CVE-2012-2717

The CVE-2012-2717 issue affects Drupal via the Mobile Tools module (6.x-2.x) prior to 6.x-2.3. It enables cross-site scripting (XSS) by unsafely displaying user-supplied values in the General configuration page (Mobile URL field, Desktop URL field) or the Mobile Tools block message options. The r...

PT-2012-4207

Name of the Vulnerable Software and Affected Versions Drupal Mobile Tools module versions 6.x-2.x before 6.x-2.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific fields, including the Mobile URL field, Desktop URL field to the General configuration...