EUVD-2012-6429

Malware in sbrugna...

CVE-2012-6582

Cross-site scripting XSS vulnerability in the Spambot module 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 for Drupal allows certain remote attackers to inject arbitrary web script or HTML via a stopforumspam.com API response, which is logged by the watchdog...

Cross site scripting

Cross-site scripting XSS vulnerability in the Spambot module 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 for Drupal allows certain remote attackers to inject arbitrary web script or HTML via a stopforumspam.com API response, which is logged by the watchdog...

CVE-2012-6582

The vulnerability CVE-2012-6582 affects the Drupal Spambot module: versions 6.x-3.x before 6.x-3.2 and 7.x-1.x before 7.x-1.1 permit XSS via stopforumspam.com API responses that are logged by watchdog. The root cause is improper sanitization of API responses before logging, enabling remote attack...