Description
SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References (3)
Core 3
Core References
Vendor Advisory x_refsource_misc
http://drupal.org/node/1853268
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/11/29/2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/56720
Scores
EPSS
0.0121
EPSS Percentile
65.3%
Details
CWE
CWE-89
Status
published
Products (1)
scripthead/webmail_plus
Published
Dec 26, 2012
Tracked Since
Feb 18, 2026