# CVEs published 2013-06-25 9 CVEs were published on June 25, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2012-6573](https://cve.now/CVE-2012-6573.md): Cross-site scripting (XSS) vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.3 for Drupal (no CVSS) - [CVE-2013-1971](https://cve.now/CVE-2013-1971.md): Cross-site scripting (XSS) vulnerability in the MP3 Player module for Drupal 6.x allows remote authenticated users with certain permissions (no CVSS) - [CVE-2013-2177](https://cve.now/CVE-2013-2177.md): Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.3 for Drupal allows rem (no CVSS) - [CVE-2013-4680](https://cve.now/CVE-2013-4680.md): Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redirect users to arbitrar (no CVSS) - [CVE-2013-4681](https://cve.now/CVE-2013-4681.md): SQL injection vulnerability in the sofortueberweisung2commerce extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary (no CVSS) - [CVE-2013-4682](https://cve.now/CVE-2013-4682.md): SQL injection vulnerability in the Multishop extension before 2.0.39 for TYPO3 allows remote attackers to execute arbitrary SQL commands via (no CVSS, bvbmedia/multishop) - [CVE-2013-4683](https://cve.now/CVE-2013-4683.md): SQL injection vulnerability in the meta\_feedit extension 0.1.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL comma (no CVSS) - [CVE-2013-4604](https://cve.now/CVE-2013-4604.md): Fortinet FortiOS before 5.0.3 on FortiGate devices does not properly restrict Guest capabilities, which allows remote authenticated users to (no CVSS) - [CVE-2013-4669](https://cve.now/CVE-2013-4669.md): FortiClient before 4.3.5.472 on Windows, before 4.0.3.134 on Mac OS X, and before 4.0 on Android; FortiClient Lite before 4.3.4.461 on Windo (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-06-25 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.