# CVEs published 2013-11-26

8 CVEs were published on November 26, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-3923](https://cve.now/CVE-2013-3923.md): Directory traversal vulnerability in SavySoda WiFi HD Free before 7.0 allows remote attackers to read arbitrary files via a ..%2f (encoded d (no CVSS)
- [CVE-2013-6873](https://cve.now/CVE-2013-6873.md): SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2013-6874](https://cve.now/CVE-2013-6874.md): Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a long URL in a .m3u fi (no CVSS)
- [CVE-2013-6875](https://cve.now/CVE-2013-6875.md): SQL injection vulnerability in functions/prepend\_adm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers (no CVSS)
- [CVE-2013-4522](https://cve.now/CVE-2013-4522.md): lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: priv (no CVSS, moodle/moodle)
- [CVE-2013-4523](https://cve.now/CVE-2013-4523.md): Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x bef (no CVSS)
- [CVE-2013-4524](https://cve.now/CVE-2013-4524.md): Directory traversal vulnerability in repository/filesystem/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2. (no CVSS)
- [CVE-2013-4525](https://cve.now/CVE-2013-4525.md): Cross-site scripting (XSS) vulnerability in mod/quiz/report/responses/responses\_table.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-11-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.