# CVEs published 2012-07-23 19 CVEs were published on July 23, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2012-3387](https://cve.now/CVE-2012-3387.md): Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload, which allows remote authentic (no CVSS, moodle/moodle) - [CVE-2012-3388](https://cve.now/CVE-2012-3388.md): The is\_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the cachin (no CVSS) - [CVE-2012-3389](https://cve.now/CVE-2012-3389.md): Multiple cross-site scripting (XSS) vulnerabilities in mod/lti/typessettings.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 allow r (no CVSS) - [CVE-2012-3390](https://cve.now/CVE-2012-3390.md): lib/filelib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly restrict file access after a block has been hidden, wh (no CVSS) - [CVE-2012-3391](https://cve.now/CVE-2012-3391.md): mod/forum/rsslib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly implement the requirement for posting before read (no CVSS) - [CVE-2012-3392](https://cve.now/CVE-2012-3392.md): mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows (no CVSS) - [CVE-2012-3393](https://cve.now/CVE-2012-3393.md): Cross-site scripting (XSS) vulnerability in repository/lib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 allows remote authenticat (no CVSS) - [CVE-2012-3394](https://cve.now/CVE-2012-3394.md): auth/ldap/ntlmsso\_attempt.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 redirects users (no CVSS) - [CVE-2012-3395](https://cve.now/CVE-2012-3395.md): SQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows re (no CVSS) - [CVE-2012-3396](https://cve.now/CVE-2012-3396.md): Cross-site scripting (XSS) vulnerability in cohort/edit\_form.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and (no CVSS) - [CVE-2012-3397](https://cve.now/CVE-2012-3397.md): lib/modinfolib.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 does not check for a group- (no CVSS) - [CVE-2012-3398](https://cve.now/CVE-2012-3398.md): Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows r (no CVSS) - [CVE-2012-0305](https://cve.now/CVE-2012-0305.md): Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local (no CVSS) - [CVE-2012-2574](https://cve.now/CVE-2012-2574.md): SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbit (no CVSS) - [CVE-2012-2953](https://cve.now/CVE-2012-2953.md): The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary commands via crafted input (no CVSS) - [CVE-2012-2957](https://cve.now/CVE-2012-2957.md): The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows local users to gain privileges by modifying files, related to a (no CVSS) - [CVE-2012-2961](https://cve.now/CVE-2012-2961.md): SQL injection vulnerability in the management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbit (no CVSS) - [CVE-2012-2976](https://cve.now/CVE-2012-2976.md): The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted (no CVSS) - [CVE-2012-2977](https://cve.now/CVE-2012-2977.md): The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to change arbitrary passwords via crafted input (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-07-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.