# Vulnerabilities published in 2011 - [CVE-2011-4338](https://insights.sbomify.com/CVE-2011-4338/): Auth bypass in shaman (high 7.8) - [CVE-2011-4337](https://insights.sbomify.com/CVE-2011-4337/): Code injection in n/a (high 7.5) - [CVE-2011-4336](https://insights.sbomify.com/CVE-2011-4336/): Cross-site scripting in Wiki CMS Groupware (medium 6.1) - [CVE-2011-4335](https://insights.sbomify.com/CVE-2011-4335/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4334](https://insights.sbomify.com/CVE-2011-4334/): File upload in n/a (high 8.8) - [CVE-2011-4333](https://insights.sbomify.com/CVE-2011-4333/): Cross-site scripting in n/a (medium 6.1) - [CVE-2011-4332](https://insights.sbomify.com/CVE-2011-4332/): Joomla! vulnerable to Cross-site Scripting (medium 4.3) - [CVE-2011-4330](https://insights.sbomify.com/CVE-2011-4330/): Memory corruption in n/a (high 7.2) - [CVE-2011-4329](https://insights.sbomify.com/CVE-2011-4329/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4328](https://insights.sbomify.com/CVE-2011-4328/): Information disclosure in n/a (medium 5.0) - [CVE-2011-4327](https://insights.sbomify.com/CVE-2011-4327/): Information disclosure in n/a (medium 5.5) - [CVE-2011-4326](https://insights.sbomify.com/CVE-2011-4326/): Denial of service in n/a (high 7.1) - [CVE-2011-4325](https://insights.sbomify.com/CVE-2011-4325/): Null dereference in n/a (medium 4.9) - [CVE-2011-4324](https://insights.sbomify.com/CVE-2011-4324/): Denial of service in n/a (medium 4.9) - [CVE-2011-4322](https://insights.sbomify.com/CVE-2011-4322/): Auth bypass in websitebaker (high 7.5) - [CVE-2011-4321](https://insights.sbomify.com/CVE-2011-4321/): Weak cryptography in n/a (medium 5.0) - [CVE-2011-4320](https://insights.sbomify.com/CVE-2011-4320/): Ejabberd DoS via malformed stanza (medium 4.0) - [CVE-2011-4319](https://insights.sbomify.com/CVE-2011-4319/): Cross-site Scripting vulnerability in i18n translations helper method (medium 4.3) - [CVE-2011-4318](https://insights.sbomify.com/CVE-2011-4318/): Security feature bypass in n/a (medium 5.8) - [CVE-2011-4317](https://insights.sbomify.com/CVE-2011-4317/): Server-side request forgery in n/a (medium 4.3) - [CVE-2011-4316](https://insights.sbomify.com/CVE-2011-4316/): Missing authorization in n/a (low 3.7) - [CVE-2011-4315](https://insights.sbomify.com/CVE-2011-4315/): Memory corruption in n/a (medium 6.8) - [CVE-2011-4314](https://insights.sbomify.com/CVE-2011-4314/): OpenID4Java does not verify that Attribute Exchange (AX) information is signed (medium 5.8) - [CVE-2011-4313](https://insights.sbomify.com/CVE-2011-4313/): Denial of service in n/a (medium 5.0) - [CVE-2011-4312](https://insights.sbomify.com/CVE-2011-4312/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4311](https://insights.sbomify.com/CVE-2011-4311/): Auth bypass in n/a (medium 5.0) - [CVE-2011-4310](https://insights.sbomify.com/CVE-2011-4310/): Other in CMSMS (high 7.5) - [CVE-2011-4309](https://insights.sbomify.com/CVE-2011-4309/): Missing authorization in n/a (medium 5.0) - [CVE-2011-4308](https://insights.sbomify.com/CVE-2011-4308/): Information disclosure in n/a (medium 4.0) - [CVE-2011-4307](https://insights.sbomify.com/CVE-2011-4307/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4306](https://insights.sbomify.com/CVE-2011-4306/): Moodle XSS Vulnerability (medium 4.3) - [CVE-2011-4305](https://insights.sbomify.com/CVE-2011-4305/): Denial of service in n/a (medium 4.0) - [CVE-2011-4304](https://insights.sbomify.com/CVE-2011-4304/): Information disclosure in n/a (medium 4.0) - [CVE-2011-4303](https://insights.sbomify.com/CVE-2011-4303/): Auth bypass in n/a (medium 4.3) - [CVE-2011-4302](https://insights.sbomify.com/CVE-2011-4302/): Security feature bypass in n/a (medium 6.8) - [CVE-2011-4301](https://insights.sbomify.com/CVE-2011-4301/): Moodle Allows Modification of Constants (medium 5.0) - [CVE-2011-4300](https://insights.sbomify.com/CVE-2011-4300/): Moodle does not properly restrict access to category and course data (medium 5.0) - [CVE-2011-4299](https://insights.sbomify.com/CVE-2011-4299/): Moodle vulnerable to Cross-Site Scripting (medium 4.3) - [CVE-2011-4298](https://insights.sbomify.com/CVE-2011-4298/): Moodle vulnerable to Cross-Site Request Forgery (medium 6.8) - [CVE-2011-4297](https://insights.sbomify.com/CVE-2011-4297/): Moodle does not properly restrict comment capabilities (medium 6.4) - [CVE-2011-4296](https://insights.sbomify.com/CVE-2011-4296/): Missing authorization in n/a (medium 5.5) - [CVE-2011-4295](https://insights.sbomify.com/CVE-2011-4295/): Missing authorization in n/a (medium 6.5) - [CVE-2011-4294](https://insights.sbomify.com/CVE-2011-4294/): Moodle Open Redirect Via Error Messages (medium 5.8) - [CVE-2011-4293](https://insights.sbomify.com/CVE-2011-4293/): Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory (medium 6.4) - [CVE-2011-4292](https://insights.sbomify.com/CVE-2011-4292/): Moodle allows remote authenticated users to cause a denial of service (invalid database records) (medium 4.0) - [CVE-2011-4291](https://insights.sbomify.com/CVE-2011-4291/): Moodle allows remote authenticated users to cause a denial of service (invalid database records) (medium 4.0) - [CVE-2011-4290](https://insights.sbomify.com/CVE-2011-4290/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4289](https://insights.sbomify.com/CVE-2011-4289/): Moodle does not recogniz configuration setting that makes e-mail addresses visible only to course members (medium 4.0) - [CVE-2011-4288](https://insights.sbomify.com/CVE-2011-4288/): Missing authorization in n/a (medium 4.0) - [CVE-2011-4287](https://insights.sbomify.com/CVE-2011-4287/): Moodle does not force password changes for autosubscribed users (medium 6.8) - [CVE-2011-4286](https://insights.sbomify.com/CVE-2011-4286/): Moodle vulnerable to Cross-site Scripting (medium 4.3) - [CVE-2011-4285](https://insights.sbomify.com/CVE-2011-4285/): Moodle Incorrect Default Settings (medium 5.5) - [CVE-2011-4284](https://insights.sbomify.com/CVE-2011-4284/): Moodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page (medium 5.0) - [CVE-2011-4283](https://insights.sbomify.com/CVE-2011-4283/): Moodle allows remote attackers to obtain sensitive information (medium 5.0) - [CVE-2011-4282](https://insights.sbomify.com/CVE-2011-4282/): Moodle vulnerable to Cross-site Scripting (medium 4.3) - [CVE-2011-4281](https://insights.sbomify.com/CVE-2011-4281/): Moodle vulnerable to Cross-Site Request Forgery (medium 6.8) - [CVE-2011-4280](https://insights.sbomify.com/CVE-2011-4280/): Moodle vulnerable to XSS via bundled spikephpcoverage library (medium 4.3) - [CVE-2011-4279](https://insights.sbomify.com/CVE-2011-4279/): Moodle does not use the forceloginforprofiles setting for course-profiles access control (medium 5.0) - [CVE-2011-4278](https://insights.sbomify.com/CVE-2011-4278/): Moodle XSS In Tag Autocomplete functionality (medium 4.3) - [CVE-2011-4277](https://insights.sbomify.com/CVE-2011-4277/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4276](https://insights.sbomify.com/CVE-2011-4276/): Information disclosure in n/a (medium 4.3) - [CVE-2011-4275](https://insights.sbomify.com/CVE-2011-4275/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4274](https://insights.sbomify.com/CVE-2011-4274/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4273](https://insights.sbomify.com/CVE-2011-4273/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4266](https://insights.sbomify.com/CVE-2011-4266/): Path traversal in n/a (critical 9.3) - [CVE-2011-4265](https://insights.sbomify.com/CVE-2011-4265/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4264](https://insights.sbomify.com/CVE-2011-4264/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4263](https://insights.sbomify.com/CVE-2011-4263/): Cross-site scripting in n/a (medium 4.3) - [CVE-2011-4262](https://insights.sbomify.com/CVE-2011-4262/): Memory corruption in n/a (critical 9.3) - [CVE-2011-4261](https://insights.sbomify.com/CVE-2011-4261/): Memory corruption in n/a (critical 9.3) - [CVE-2011-4260](https://insights.sbomify.com/CVE-2011-4260/): Code injection in n/a (critical 9.3) - [CVE-2011-4259](https://insights.sbomify.com/CVE-2011-4259/): Integer overflow in n/a (critical 9.3) - [CVE-2011-4258](https://insights.sbomify.com/CVE-2011-4258/): Code injection in n/a (critical 9.3) - [CVE-2011-4257](https://insights.sbomify.com/CVE-2011-4257/): Code injection in n/a (critical 9.3) - [CVE-2011-4256](https://insights.sbomify.com/CVE-2011-4256/): Code injection in n/a (critical 10.0) - [CVE-2011-4255](https://insights.sbomify.com/CVE-2011-4255/): Memory corruption in n/a (critical 10.0) - [CVE-2011-4254](https://insights.sbomify.com/CVE-2011-4254/): Code injection in n/a (critical 10.0) - [CVE-2011-4253](https://insights.sbomify.com/CVE-2011-4253/): Memory corruption in n/a (critical 10.0) - [CVE-2011-4252](https://insights.sbomify.com/CVE-2011-4252/): Code injection in n/a (critical 9.3) - [CVE-2011-4251](https://insights.sbomify.com/CVE-2011-4251/): Code injection in n/a (critical 9.3) - [CVE-2011-4250](https://insights.sbomify.com/CVE-2011-4250/): Memory corruption in n/a (critical 10.0) - [CVE-2011-4249](https://insights.sbomify.com/CVE-2011-4249/): Memory corruption in n/a (critical 10.0) - [CVE-2011-4248](https://insights.sbomify.com/CVE-2011-4248/): Code injection in n/a (critical 9.3) - [CVE-2011-4247](https://insights.sbomify.com/CVE-2011-4247/): Code injection in n/a (critical 9.3) - [CVE-2011-4246](https://insights.sbomify.com/CVE-2011-4246/): Memory corruption in n/a (critical 10.0) - [CVE-2011-4245](https://insights.sbomify.com/CVE-2011-4245/): Memory corruption in n/a (critical 10.0) - [CVE-2011-4244](https://insights.sbomify.com/CVE-2011-4244/): Memory corruption in n/a (critical 10.0) - [CVE-2011-4237](https://insights.sbomify.com/CVE-2011-4237/): Other in n/a (medium 4.3) - [CVE-2011-4232](https://insights.sbomify.com/CVE-2011-4232/): Information disclosure in n/a (medium 5.0) - [CVE-2011-4231](https://insights.sbomify.com/CVE-2011-4231/): Denial of service in n/a (medium 6.3) - [CVE-2011-4223](https://insights.sbomify.com/CVE-2011-4223/): Other in n/a (critical 9.3) - [CVE-2011-4222](https://insights.sbomify.com/CVE-2011-4222/): Other in n/a (critical 9.3) - [CVE-2011-4221](https://insights.sbomify.com/CVE-2011-4221/): Other in n/a (critical 9.3) - [CVE-2011-4220](https://insights.sbomify.com/CVE-2011-4220/): Other in n/a (critical 9.3) - [CVE-2011-4219](https://insights.sbomify.com/CVE-2011-4219/): Memory corruption in n/a (critical 9.3) - [CVE-2011-4218](https://insights.sbomify.com/CVE-2011-4218/): Memory corruption in n/a (critical 9.3) - [CVE-2011-4217](https://insights.sbomify.com/CVE-2011-4217/): Memory corruption in n/a (critical 9.3) - [CVE-2011-4216](https://insights.sbomify.com/CVE-2011-4216/): Other in n/a (critical 9.3) - [CVE-2011-4215](https://insights.sbomify.com/CVE-2011-4215/): SQL injection in n/a (high 7.5) - [CVE-2011-4214](https://insights.sbomify.com/CVE-2011-4214/): Auth bypass in n/a (critical 10.0) --- From sbomify Insights: https://insights.sbomify.com/years/2011/page/9/