CVE-2012-5590

https://notcve.org/view.php?id=CVE-2012-5590

SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en el módulo Webmail Plus para Drupal permite a atacantes remotos ejecutar comandos SQL a través de vectores no especificados. • http://drupal.org/node/1853268 http://www.openwall.com/lists/oss-security/2012/11/29/2 http://www.securityfocus.com/bid/56720 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •