CVE-2012-5570

The CVE-2012-5570 entry concerns Drupal's Basic webmail module (6.x-1.x) prior to 6.x-1.2. The vulnerability allows remote authenticated users with the access basic_webmail permission to read arbitrary users’ email addresses, constituting an information-disclosure flaw. Root cause details are not...

CVE-2012-5569

CVE-2012-5569 affects the Drupal Basic webmail module (6.x-1.x prior to 6.x-1.2). The root cause is several XSS flaws that allow remote attackers to inject arbitrary script/HTML via the page title or crafted email messages. Impact is limited to sites using this contributed module; successful expl...