CVE-2011-1129

NIEDRIG 3.5CVE-2011-1129 · Published 21/06/2011 · updated 16/06/2026

Kurz gesagt

CVE-2011-1129 ist eine Schwachstelle (NIEDRIG (CVSS 3.5)) in smf (simplemachines).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.00%, höher als bei 62.7% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
smf simplemachines	`= 1.0= 1.0.1= 1.0.10= 1.0.12= 1.0.13= 1.0.14= 1.0.15= 1.0.16= 1.0.17= 1.0.18= 1.0.19= 1.0.2= 1.0.20= 1.0.21= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.0.9= 1.1= 1.1.1= 1.1.10= 1.1.11= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.1.9= 2.0≤ 1.1.12`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a save_items action.

References

custom.simplemachines.org/mods/downloads/smf_patch_2.0-RC4_security.zip · Patch
openwall.com/lists/oss-security/2011/02/22/17 · Patch
openwall.com/lists/oss-security/2011/03/02/4 · Patch
simplemachines.org/community/index.php · Patch

Weitere Schwachstellen in smf

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

smf

simplemachines

= 1.0= 1.0.1= 1.0.10= 1.0.12= 1.0.13= 1.0.14= 1.0.15= 1.0.16= 1.0.17= 1.0.18= 1.0.19= 1.0.2= 1.0.20= 1.0.21= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.0.9= 1.1= 1.1.1= 1.1.10= 1.1.11= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.1.9= 2.0≤ 1.1.12

No fix yet

Weitere Schwachstellen in smf

Alle anzeigen →