# CVEs published 2013-01-12

8 CVEs were published on January 12, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2011-5252](https://cve.now/CVE-2011-5252.md): Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x befo (no CVSS)
- [CVE-2011-5253](https://cve.now/CVE-2011-5253.md): Dl Download Ticket Service 0.3 through 0.9 allows remote attackers to login as an arbitrary user by supplying an authorization header. (no CVSS)
- [CVE-2011-5254](https://cve.now/CVE-2011-5254.md): Unspecified vulnerability in the Connections plugin before 0.7.1.6 for WordPress has unknown impact and attack vectors. (no CVSS)
- [CVE-2012-5874](https://cve.now/CVE-2012-5874.md): Multiple SQL injection vulnerabilities in the (1) update\_whosonline\_reg and (2) update\_whosonline\_guest functions in Elite Bulletin Board be (no CVSS)
- [CVE-2012-6499](https://cve.now/CVE-2012-6499.md): Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows remote attackers to (no CVSS)
- [CVE-2012-6500](https://cve.now/CVE-2012-6500.md): Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arbitrary files via a . (no CVSS)
- [CVE-2012-6501](https://cve.now/CVE-2012-6501.md): The KillProcess method in the HP PKI ActiveX control (HPPKI.ocx) before 1.2.0.1 allows remote attackers to cause a denial of service (kill p (no CVSS)
- [CVE-2013-0154](https://cve.now/CVE-2013-0154.md): The get\_page\_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows local PV or HVM guest administrators to cause (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-01-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.