← Back

Basic Webmail Project

basic_webmail_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Basic Webmail
basic_webmail
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-5570
1Basic Webmail Project
1Basic Webmail
Nov 21, 2024
Feb 8, 2020
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basic_webmail" permission to read arbitrary users' email addresses.
CVE-2012-5569
2Basic Webmail Project
Jason Flatt
2Basic Webmail
Basic Webmail
Apr 29, 2026
Dec 3, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in the Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via a (1) page title or (2) crafted email me...Show more
Multiple cross-site scripting (XSS) vulnerabilities in the Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via a (1) page title or (2) crafted email message.Show less