CVE-2012-5590 SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| scripthead webmail plus | All versions | No fix listed |
References
- drupal.org vendor-advisory
- [oss-security] 20121128 Re: CVE request for Drupal contributed modules mailing-list
- 56720 vdb-entry