# CVEs published 2013-01-27 20 CVEs were published on January 27, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2012-6098](https://cve.now/CVE-2012-6098.md): grade/edit/outcome/edit\_form.php in Moodle 1.9.x through 1.9.19, 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x befo (no CVSS) - [CVE-2012-6099](https://cve.now/CVE-2012-6099.md): The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and (no CVSS, moodle/moodle) - [CVE-2012-6100](https://cve.now/CVE-2012-6100.md): report/outline/index.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly enforce the moodle/user: (no CVSS) - [CVE-2012-6101](https://cve.now/CVE-2012-6101.md): Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to re (no CVSS) - [CVE-2012-6102](https://cve.now/CVE-2012-6102.md): lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attacke (no CVSS) - [CVE-2012-6103](https://cve.now/CVE-2012-6103.md): Multiple cross-site request forgery (CSRF) vulnerabilities in user/messageselect.php in the messaging system in Moodle 2.2.x before 2.2.7, 2 (no CVSS) - [CVE-2012-6104](https://cve.now/CVE-2012-6104.md): blog/rsslib.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allows remote attackers to obtain sensitive informa (no CVSS) - [CVE-2012-6105](https://cve.now/CVE-2012-6105.md): blog/rsslib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 continues to provide a blog RS (no CVSS) - [CVE-2012-6106](https://cve.now/CVE-2012-6106.md): calendar/managesubscriptions.php in the Manage Subscriptions implementation in Moodle 2.4.x before 2.4.1 omits a capability check, which all (no CVSS) - [CVE-2012-6112](https://cve.now/CVE-2012-6112.md): classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2 (no CVSS, moodle/moodle) - [CVE-2012-5484](https://cve.now/CVE-2012-5484.md): The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which (no CVSS) - [CVE-2013-0458](https://cve.now/CVE-2013-0458.md): Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 be (no CVSS) - [CVE-2013-0459](https://cve.now/CVE-2013-0459.md): Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 be (no CVSS) - [CVE-2013-0460](https://cve.now/CVE-2013-0460.md): Cross-site request forgery (CSRF) vulnerability in the portlet subsystem in the administrative console in IBM WebSphere Application Server ( (no CVSS) - [CVE-2013-0461](https://cve.now/CVE-2013-0461.md): Cross-site scripting (XSS) vulnerability in the virtual member manager (VMM) administrative console in IBM WebSphere Application Server (WAS (no CVSS) - [CVE-2013-0462](https://cve.now/CVE-2013-0462.md): Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.1, 7.0 before 7.0.0.27, 8.0, and 8.5 has unknown impact and attack vec (no CVSS) - [CVE-2013-0651](https://cve.now/CVE-2013-0651.md): The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web (no CVSS) - [CVE-2013-0652](https://cve.now/CVE-2013-0652.md): GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows (no CVSS) - [CVE-2013-0653](https://cve.now/CVE-2013-0653.md): Directory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICI (no CVSS) - [CVE-2013-0654](https://cve.now/CVE-2013-0654.md): CimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allow (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-01-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.