# CVEs published 2012-09-09

19 CVEs were published on September 9, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-4942](https://cve.now/CVE-2011-4942.md): Multiple cross-site scripting (XSS) vulnerabilities in admin/configuration.php in Geeklog before 1.7.1sr1 allow remote attackers to inject a (no CVSS)
- [CVE-2011-5159](https://cve.now/CVE-2011-5159.md): Cross-site scripting (XSS) vulnerability in admin/configuration.php in Geeklog before 1.7.1sr1 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2011-5160](https://cve.now/CVE-2011-5160.md): Cross-site scripting (XSS) vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web script or HTML via the si (no CVSS)
- [CVE-2011-5161](https://cve.now/CVE-2011-5161.md): Unrestricted file upload vulnerability in the patient photograph functionality in OpenEMR 4 allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2012-1151](https://cve.now/CVE-2012-1151.md): Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote Post (no CVSS)
- [CVE-2012-1152](https://cve.now/CVE-2012-1152.md): Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML (aka YAML-LibYAML and perl-YAML-LibYAML) mo (no CVSS)
- [CVE-2012-1578](https://cve.now/CVE-2012-1578.md): Multiple cross-site request forgery (CSRF) vulnerabilities in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allow remote attackers (no CVSS)
- [CVE-2012-1579](https://cve.now/CVE-2012-1579.md): The resource loader in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 includes private data such as CSRF tokens in a JavaScript fil (no CVSS)
- [CVE-2012-1580](https://cve.now/CVE-2012-1580.md): Cross-site request forgery (CSRF) vulnerability in Special:Upload in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote a (no CVSS)
- [CVE-2012-1581](https://cve.now/CVE-2012-1581.md): MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote (no CVSS)
- [CVE-2012-1582](https://cve.now/CVE-2012-1582.md): Cross-site scripting (XSS) vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote att (no CVSS)
- [CVE-2012-1648](https://cve.now/CVE-2012-1648.md): Cross-site scripting (XSS) vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the adminis (no CVSS)
- [CVE-2012-1649](https://cve.now/CVE-2012-1649.md): Cool Aid module before 6.x-1.9 for Drupal does not enforce access restrictions, which allows remote authenticated users with the administer (no CVSS)
- [CVE-2012-1911](https://cve.now/CVE-2012-1911.md): Multiple SQL injection vulnerabilities in PHP Address Book 6.2.12 and earlier allow remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2012-1912](https://cve.now/CVE-2012-1912.md): Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2012-2115](https://cve.now/CVE-2012-2115.md): SQL injection vulnerability in interface/login/validateUser.php in OpenEMR 4.1.0 and possibly earlier allows remote attackers to execute arb (no CVSS)
- [CVE-2012-2315](https://cve.now/CVE-2012-2315.md): admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user roles, which allows remo (no CVSS)
- [CVE-2012-2316](https://cve.now/CVE-2012-2316.md): Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows r (no CVSS)
- [CVE-2012-4885](https://cve.now/CVE-2012-4885.md): The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to cause a denial of service (infinit (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-09-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.