# CVEs published 2012-08-23

30 CVEs were published on August 23, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-5103](https://cve.now/CVE-2011-5103.md): SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL commands via the id… (no CVSS)
- [CVE-2011-5104](https://cve.now/CVE-2011-5104.md): Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for… (no CVSS)
- [CVE-2011-5105](https://cve.now/CVE-2011-5105.md): Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow… (no CVSS)
- [CVE-2011-5106](https://cve.now/CVE-2011-5106.md): Cross-site scripting (XSS) vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote… (no CVSS)
- [CVE-2011-5107](https://cve.now/CVE-2011-5107.md): Cross-site scripting (XSS) vulnerability in post\_alert.php in Alert Before Your Post plugin, possibly 0.1.1 and earlier, for WordPress… (no CVSS)
- [CVE-2011-5108](https://cve.now/CVE-2011-5108.md): Cross-site scripting (XSS) vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2011-5109](https://cve.now/CVE-2011-5109.md): Multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2011-5110](https://cve.now/CVE-2011-5110.md): Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2011-5111](https://cve.now/CVE-2011-5111.md): Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2011-5112](https://cve.now/CVE-2011-5112.md): SQL injection vulnerability in Alameda (com\_alameda) component before 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2011-5113](https://cve.now/CVE-2011-5113.md): SQL injection vulnerability in frontend/models/techfoliodetail.php in Techfolio (com\_techfolio) component 1.0 for Joomla! allows remote… (no CVSS)
- [CVE-2011-5114](https://cve.now/CVE-2011-5114.md): Multiple cross-site scripting (XSS) vulnerabilities in the Authoritative DNS - DNS Zones page in Barracuda Link Balancer 330 Firmware… (no CVSS)
- [CVE-2011-5115](https://cve.now/CVE-2011-5115.md): Cross-site scripting (XSS) vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2011-5116](https://cve.now/CVE-2011-5116.md): SQL injection vulnerability in setseed-hub in SetSeed CMS 5.8.20, 5.11.2, and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2012-4337](https://cve.now/CVE-2012-4337.md): Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted… (no CVSS)
- [CVE-2008-7312](https://cve.now/CVE-2008-7312.md): The Filtering Service in Websense Enterprise 5.2 through 6.3 does not consider the IP address during URL categorization, which makes it… (no CVSS)
- [CVE-2009-5119](https://cve.now/CVE-2009-5119.md): The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 enables weak SSL ciphers in… (no CVSS)
- [CVE-2009-5120](https://cve.now/CVE-2009-5120.md): The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 allows connections to TCP… (no CVSS)
- [CVE-2009-5121](https://cve.now/CVE-2009-5121.md): Websense Email Security 7.1 before Hotfix 4 allows remote attackers to bypass the sender-based blacklist by using the 8BITMIME EHLO… (no CVSS)
- [CVE-2009-5122](https://cve.now/CVE-2009-5122.md): The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive… (no CVSS)
- [CVE-2010-5144](https://cve.now/CVE-2010-5144.md): The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in… (no CVSS)
- [CVE-2010-5145](https://cve.now/CVE-2010-5145.md): The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 136 and 7.x before 7.1.1 on Windows allows remote… (no CVSS)
- [CVE-2010-5146](https://cve.now/CVE-2010-5146.md): The Remote Filtering component in Websense Web Security and Web Filter before 7.1 Hotfix 66 allows local users to bypass filtering by (1)… (no CVSS)
- [CVE-2010-5147](https://cve.now/CVE-2010-5147.md): The Remote Filtering component in Websense Web Security and Web Filter before 6.3.3 Hotfix 18 and 7.x before 7.1.1 allows remote attackers… (no CVSS)
- [CVE-2010-5148](https://cve.now/CVE-2010-5148.md): Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set the secure flag for the Encrypted Session (SSL) cookie in an https… (no CVSS)
- [CVE-2010-5149](https://cve.now/CVE-2010-5149.md): Websense Web Security and Web Filter before 6.3.3 Hotfix 27 and 7.x before 7.1.1 allow remote attackers to cause a denial of service (Blue… (no CVSS)
- [CVE-2011-5102](https://cve.now/CVE-2011-5102.md): The Investigative Reports web interface in the TRITON management console in Websense Web Security 7.1 before Hotfix 109, 7.1.1 before… (no CVSS)
- [CVE-2012-2582](https://cve.now/CVE-2012-2582.md): Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13, 3.0.x before… (no CVSS)
- [CVE-2012-4604](https://cve.now/CVE-2012-4604.md): The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentication and read… (no CVSS)
- [CVE-2012-4605](https://cve.now/CVE-2012-4605.md): The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2012-08-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.