# CVEs published 2012-09-23

19 CVEs were published on September 23, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-5191](https://cve.now/CVE-2011-5191.md): Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows remote attackers to (no CVSS)
- [CVE-2011-5192](https://cve.now/CVE-2011-5192.md): Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to (no CVSS)
- [CVE-2011-5193](https://cve.now/CVE-2011-5193.md): Cross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin 1.4.2.3 for WordPress, when the W (no CVSS)
- [CVE-2011-5194](https://cve.now/CVE-2011-5194.md): Cross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin before 1.4.2.3 for WordPress allo (no CVSS)
- [CVE-2011-5195](https://cve.now/CVE-2011-5195.md): Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and ea (no CVSS)
- [CVE-2011-5196](https://cve.now/CVE-2011-5196.md): Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earli (no CVSS)
- [CVE-2011-5197](https://cve.now/CVE-2011-5197.md): Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester Systems 2.3.1 and ear (no CVSS)
- [CVE-2011-5198](https://cve.now/CVE-2011-5198.md): SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2011-5199](https://cve.now/CVE-2011-5199.md): Cross-site scripting (XSS) vulnerability in sign.php in tinyguestbook allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2011-5200](https://cve.now/CVE-2011-5200.md): Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL commands via the id paramet (no CVSS)
- [CVE-2011-5201](https://cve.now/CVE-2011-5201.md): Multiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to execute arbitrary SQL commands via the (1) nam (no CVSS)
- [CVE-2012-5098](https://cve.now/CVE-2012-5098.md): Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the (1) id (no CVSS)
- [CVE-2012-5099](https://cve.now/CVE-2012-5099.md): Cross-site scripting (XSS) vulnerability in list.php in PHPB2B 4.1 and earlier allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2012-5100](https://cve.now/CVE-2012-5100.md): Directory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary files via a (1) ..%5c (dot dot encoded backslas (no CVSS)
- [CVE-2012-5101](https://cve.now/CVE-2012-5101.md): SQL injection vulnerability in the JExtensions JE Poll component before 1.1 for Joomla! allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2012-5102](https://cve.now/CVE-2012-5102.md): Cross-site scripting (XSS) vulnerability in inc/extensions.php in VertrigoServ 2.25 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2012-5103](https://cve.now/CVE-2012-5103.md): Multiple cross-site scripting (XSS) vulnerabilities in action/add-submit.php in Ggb Guestbook 0.3.1 allow remote attackers to inject arbitra (no CVSS)
- [CVE-2012-5104](https://cve.now/CVE-2012-5104.md): Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attackers to inject arbitra (no CVSS)
- [CVE-2012-5105](https://cve.now/CVE-2012-5105.md): Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-09-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.