EUVD-2012-5477

Malware in sbrugna...

CVE-2012-5590

SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-5590

SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-5590

The CVE-2012-5590 issue affects the Drupal Webmail Plus contributed module. The vulnerability is a SQL injection caused by insufficient sanitization of user input used in a database query, allowing remote attackers to execute arbitrary SQL commands. Affected: all Webmail Plus module versions. Imp...

CVE-2012-5590: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2012-6040

Name of the Vulnerable Software and Affected Versions Drupal Webmail Plus module affected versions not specified Description A SQL injection issue in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no informatio...

SA-CONTRIB-2012-171 - Webmail Plus - SQL injection - (unsupported)

The Webmail plus module is a full-featured email client for Drupal. It's designed to provide email for any or all members of a Drupal site. The module doesn't sufficiently sanitize user input as it is used in a database query. CVE: CVE-2012-5590 Versions affected All Webmail Plus module versions...