# CVEs published 2012-01-26

4 CVEs were published on January 26, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1940](https://cve.now/CVE-2011-1940.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to inj (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2011-1941](https://cve.now/CVE-2011-1941.md): Open redirect vulnerability in the redirector feature in phpMyAdmin 3.4.x before 3.4.1 allows remote attackers to redirect users to arbitrar (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2012-0311](https://cve.now/CVE-2012-0311.md): Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2012-0312](https://cve.now/CVE-2012-0312.md): Cross-site scripting (XSS) vulnerability in osCommerce 2.2MS1J before R9, and osCommerce Online Merchant before 2.3.1, allows remote attacke (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-01-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.