# CVEs published 2012-08-23

30 CVEs were published on August 23, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-5103](https://cve.now/CVE-2011-5103.md): SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL commands via the id para (no CVSS)
- [CVE-2011-5104](https://cve.now/CVE-2011-5104.md): Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordP (no CVSS)
- [CVE-2011-5105](https://cve.now/CVE-2011-5105.md): Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in ZOHO ManageEngine ADSelfService Plus 4.5 Build 4521 allow remote (no CVSS)
- [CVE-2011-5106](https://cve.now/CVE-2011-5106.md): Cross-site scripting (XSS) vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote a (no CVSS)
- [CVE-2011-5107](https://cve.now/CVE-2011-5107.md): Cross-site scripting (XSS) vulnerability in post\_alert.php in Alert Before Your Post plugin, possibly 0.1.1 and earlier, for WordPress allow (no CVSS)
- [CVE-2011-5108](https://cve.now/CVE-2011-5108.md): Cross-site scripting (XSS) vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2011-5109](https://cve.now/CVE-2011-5109.md): Multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2011-5110](https://cve.now/CVE-2011-5110.md): Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary SQL commands via the S (no CVSS)
- [CVE-2011-5111](https://cve.now/CVE-2011-5111.md): Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2011-5112](https://cve.now/CVE-2011-5112.md): SQL injection vulnerability in Alameda (com\_alameda) component before 1.0.1 for Joomla! allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2011-5113](https://cve.now/CVE-2011-5113.md): SQL injection vulnerability in frontend/models/techfoliodetail.php in Techfolio (com\_techfolio) component 1.0 for Joomla! allows remote atta (no CVSS)
- [CVE-2011-5114](https://cve.now/CVE-2011-5114.md): Multiple cross-site scripting (XSS) vulnerabilities in the Authoritative DNS - DNS Zones page in Barracuda Link Balancer 330 Firmware 1.3.2. (no CVSS)
- [CVE-2011-5115](https://cve.now/CVE-2011-5115.md): Cross-site scripting (XSS) vulnerability in DLGuard, possibly 4.6 and earlier, allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2011-5116](https://cve.now/CVE-2011-5116.md): SQL injection vulnerability in setseed-hub in SetSeed CMS 5.8.20, 5.11.2, and earlier allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2012-4337](https://cve.now/CVE-2012-4337.md): Foxit Reader before 5.3 on Windows XP and Windows 7 allows remote attackers to execute arbitrary code via a PDF document with a crafted atta (no CVSS)
- [CVE-2008-7312](https://cve.now/CVE-2008-7312.md): The Filtering Service in Websense Enterprise 5.2 through 6.3 does not consider the IP address during URL categorization, which makes it easi (no CVSS)
- [CVE-2009-5119](https://cve.now/CVE-2009-5119.md): The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 enables weak SSL ciphers in c (no CVSS)
- [CVE-2009-5120](https://cve.now/CVE-2009-5120.md): The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 allows connections to TCP por (no CVSS)
- [CVE-2009-5121](https://cve.now/CVE-2009-5121.md): Websense Email Security 7.1 before Hotfix 4 allows remote attackers to bypass the sender-based blacklist by using the 8BITMIME EHLO keyword (no CVSS)
- [CVE-2009-5122](https://cve.now/CVE-2009-5122.md): The Personal Email Manager component in Websense Email Security before 7.2 allows remote attackers to obtain potentially sensitive informati (no CVSS)
- [CVE-2010-5144](https://cve.now/CVE-2010-5144.md): The ISAPI Filter plug-in in Websense Enterprise, Websense Web Security, and Websense Web Filter 6.3.3 and earlier, when used in conjunction (no CVSS)
- [CVE-2010-5145](https://cve.now/CVE-2010-5145.md): The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 136 and 7.x before 7.1.1 on Windows allows remote attacker (no CVSS)
- [CVE-2010-5146](https://cve.now/CVE-2010-5146.md): The Remote Filtering component in Websense Web Security and Web Filter before 7.1 Hotfix 66 allows local users to bypass filtering by (1) re (no CVSS)
- [CVE-2010-5147](https://cve.now/CVE-2010-5147.md): The Remote Filtering component in Websense Web Security and Web Filter before 6.3.3 Hotfix 18 and 7.x before 7.1.1 allows remote attackers t (no CVSS)
- [CVE-2010-5148](https://cve.now/CVE-2010-5148.md): Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set the secure flag for the Encrypted Session (SSL) cookie in an https sess (no CVSS)
- [CVE-2010-5149](https://cve.now/CVE-2010-5149.md): Websense Web Security and Web Filter before 6.3.3 Hotfix 27 and 7.x before 7.1.1 allow remote attackers to cause a denial of service (Blue C (no CVSS)
- [CVE-2011-5102](https://cve.now/CVE-2011-5102.md): The Investigative Reports web interface in the TRITON management console in Websense Web Security 7.1 before Hotfix 109, 7.1.1 before Hotfix (no CVSS)
- [CVE-2012-2582](https://cve.now/CVE-2012-2582.md): Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, (no CVSS)
- [CVE-2012-4604](https://cve.now/CVE-2012-4604.md): The TRITON management console in Websense Web Security before 7.6 Hotfix 24 allows remote attackers to bypass authentication and read arbitr (no CVSS)
- [CVE-2012-4605](https://cve.now/CVE-2012-4605.md): The default configuration of the SMTP component in Websense Email Security 6.1 through 7.3 enables weak SSL ciphers in the "SurfControl plc\\ (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-08-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.