EUVD-2012-5477

Malware in sbrugna...

CVE-2012-5590

SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-5590

SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-5590

The CVE-2012-5590 issue affects the Drupal Webmail Plus contributed module. The vulnerability is a SQL injection caused by insufficient sanitization of user input used in a database query, allowing remote attackers to execute arbitrary SQL commands. Affected: all Webmail Plus module versions. Imp...

SA-CONTRIB-2012-171 - Webmail Plus - SQL injection - (unsupported)

The Webmail plus module is a full-featured email client for Drupal. It's designed to provide email for any or all members of a Drupal site. The module doesn't sufficiently sanitize user input as it is used in a database query. CVE: CVE-2012-5590 Versions affected All Webmail Plus module versions...