# CVEs published 2011-12-22

7 CVEs were published on December 22, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3990](https://cve.now/CVE-2011-3990.md): Cross-site scripting (XSS) vulnerability in plugin/comment.inc.php in PukiWiki Plus! 1.4.7plus-u2-i18n and earlier allows remote attackers t (no CVSS)
- [CVE-2011-4634](https://cve.now/CVE-2011-4634.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.8 allow remote attackers to inject arbitrary web script o (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2011-4780](https://cve.now/CVE-2011-4780.md): Multiple cross-site scripting (XSS) vulnerabilities in libraries/display\_export.lib.php in phpMyAdmin 3.4.x before 3.4.9 allow remote attack (no CVSS)
- [CVE-2011-4782](https://cve.now/CVE-2011-4782.md): Cross-site scripting (XSS) vulnerability in libraries/config/ConfigFile.class.php in the setup interface in phpMyAdmin 3.4.x before 3.4.9 al (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2011-4037](https://cve.now/CVE-2011-4037.md): Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute (no CVSS)
- [CVE-2011-4203](https://cve.now/CVE-2011-4203.md): CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2 (no CVSS, moodle/moodle)
- [CVE-2011-4453](https://cve.now/CVE-2011-4453.md): The PageListSort function in scripts/pagelist.php in PmWiki 2.x before 2.2.35 allows remote attackers to execute arbitrary code via PHP sequ (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-12-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.