• info
• discussion
• exploit
• solution
• references

Drupal Webform Module Multiple Unspecified HTML Injection Vulnerabilities

Solution:
The vendor has released fixes. Please see the references for more information.


Drupal Webform Module 5.x-2.0-beta2

• Drupal webform-5.x-2.0-beta3.tar.gz
  http://ftp.drupal.org/files/projects/webform-5.x-2.0-beta3.tar.gz

Drupal Webform Module 5.x-1.9

• Drupal webform-5.x-1.10.tar.gz
  http://ftp.drupal.org/files/projects/webform-5.x-1.10.tar.gz

Drupal Webform Module 6.x-2.0-beta2

• Drupal webform-6.x-2.0-beta3.tar.gz
  http://ftp.drupal.org/files/projects/webform-6.x-2.0-beta3.tar.gz