# CVEs published 2011-06-21

14 CVEs were published on June 21, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1127](https://cve.now/CVE-2011-1127.md): SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote a (no CVSS)
- [CVE-2011-1128](https://cve.now/CVE-2011-1128.md): The loadUserSettings function in Load.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly handle inv (no CVSS)
- [CVE-2011-1129](https://cve.now/CVE-2011-1129.md): Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x be (no CVSS)
- [CVE-2011-1130](https://cve.now/CVE-2011-1130.md): Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which might allow remote (no CVSS)
- [CVE-2011-1131](https://cve.now/CVE-2011-1131.md): The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a (no CVSS)
- [CVE-2011-1480](https://cve.now/CVE-2011-1480.md): SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers t (no CVSS)
- [CVE-2011-1481](https://cve.now/CVE-2011-1481.md): Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2011-1482](https://cve.now/CVE-2011-1482.md): Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attacker (no CVSS)
- [CVE-2011-1753](https://cve.now/CVE-2011-1753.md): expat\_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity (no CVSS)
- [CVE-2011-1754](https://cve.now/CVE-2011-1754.md): jabberd14 1.6.1.1 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of (no CVSS)
- [CVE-2011-1755](https://cve.now/CVE-2011-1755.md): jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2011-1756](https://cve.now/CVE-2011-1756.md): modules/xmpp/serv\_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attacke (no CVSS)
- [CVE-2011-1757](https://cve.now/CVE-2011-1757.md): DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2011-2188](https://cve.now/CVE-2011-2188.md): LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-06-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.