Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

simple machines simple machines forum 1.1.5 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2008-6657
Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 prior to 1.0.15 and 1.1 prior to 1.1.7 allows remote malicious users to hijack the authentication of admins for requests that install packages via the package parameter in an install2 ...
Simple Machines Simple Machines Forum 1.0.5Simple Machines Simple Machines Forum 1.0.12Simple Machines Simple Machines Forum 1.1.3Simple Machines Simple Machines Forum 1.1.4Simple Machines Simple Machines Forum 1.1 Rc1Simple Machines Simple Machines Forum 1.1 Rc2Simple Machines Simple Machines Forum 1.1.1Simple Machines Simple Machines Forum 1.0.11Simple Machines Simple Machines Forum 1.1 Rc3Simple Machines Simple Machines Forum 1.1.2Simple Machines Simple Machines Forum 1.0.6Simple Machines Simple Machines Forum 1.0.7Simple Machines Simple Machines Forum 1.1.5Simple Machines Simple Machines Forum 1.1.6
4
CVSSv2
CVE-2008-6658
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 prior to 1.0.15 and 1.1 prior to 1.1.7 allows remote authenticated administrators to install packages from arbitrary directories via a .. (dot dot) in the package parameter during an install2 action...
Simple Machines Simple Machines Forum 1.1 Rc1Simple Machines Simple Machines Forum 1.1 Rc2Simple Machines Simple Machines Forum 1.0.5Simple Machines Simple Machines Forum 1.0.12Simple Machines Simple Machines Forum 1.1.3Simple Machines Simple Machines Forum 1.1.4Simple Machines Simple Machines Forum 1.1.5Simple Machines Simple Machines Forum 1.0.6Simple Machines Simple Machines Forum 1.0.7Simple Machines Simple Machines Forum 1.1.6Simple Machines Simple Machines Forum 1.1.1Simple Machines Simple Machines Forum 1.0.11Simple Machines Simple Machines Forum 1.1 Rc3Simple Machines Simple Machines Forum 1.1.2
5.5
CVSSv2
CVE-2008-6659
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 prior to 1.0.15 and 1.1 prior to 1.1.7 allows remote authenticated users to configure arbitrary local files for execution via directory traversal sequences in the value of the theme_dir field during...
Simple Machines Simple Machines Forum 1.1 Rc2Simple Machines Simple Machines Forum 1.1 Rc3Simple Machines Simple Machines Forum 1.0.5Simple Machines Simple Machines Forum 1.0.12Simple Machines Simple Machines Forum 1.1.4Simple Machines Simple Machines Forum 1.1.5Simple Machines Simple Machines Forum 1.0.6Simple Machines Simple Machines Forum 1.0.7Simple Machines Simple Machines Forum 1.1 Rc1Simple Machines Simple Machines Forum 1.1.6Simple Machines Simple Machines Forum 1.1.1Simple Machines Simple Machines Forum 1.0.11Simple Machines Simple Machines Forum 1.1.2Simple Machines Simple Machines Forum 1.1.3
7.5
CVSSv2
CVE-2013-7236
Simple Machines Forum (SMF) 2.0.6, 1.1.19, and previous versions allows remote malicious users to impersonate arbitrary users via a Unicode homoglyph character in a username.
Simplemachines Simple Machines Forum 1.1.4Simplemachines Simple Machines Forum 1.1.3Simplemachines Simple Machines Forum 1.1.2Simplemachines Simple Machines Forum 1.1.17Simplemachines Simple Machines Forum 1.1Simplemachines Simple Machines Forum 1.0.9Simplemachines Simple Machines Forum 1.0.18Simplemachines Simple Machines Forum 1.0.17Simplemachines Simple Machines Forum 1.0.16Simplemachines Simple Machines Forum 1.0.15Simplemachines Simple Machines Forum 1.0.14Simplemachines Simple Machines Forum 1.1.7Simplemachines Simple Machines Forum 1.1.5Simplemachines Simple Machines Forum 1.1.16Simplemachines Simple Machines Forum 1.1.14Simplemachines Simple Machines Forum 1.0.7Simplemachines Simple Machines Forum 1.0.5Simplemachines Simple Machines Forum 1.0.21Simplemachines Simple Machines Forum 1.0.2Simplemachines Simple Machines Forum 1.0.13Simplemachines Simple Machines Forum 1.0.10Simplemachines Simple Machines Forum 1.0
4.6
CVSSv2
CVE-2013-4465
Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum prior to 2.0.6 and 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the fi...
Simplemachines Simple Machines Forum 1.0.15Simplemachines Simple Machines Forum 1.1.6Simplemachines Simple Machines Forum 1.1.15Simplemachines Simple Machines Forum 1.1.8Simplemachines Simple Machines Forum 1.1.5Simplemachines Simple Machines Forum 1.1.11Simplemachines Simple Machines Forum 1.1.14Simplemachines Simple Machines Forum 1.0.14Simplemachines Simple Machines Forum 1.0.8Simplemachines Simple Machines Forum 1.1.16Simplemachines Simple Machines Forum 1.1.1Simplemachines Simple Machines Forum 1.0.2Simplemachines Simple Machines Forum 1.0.12Simplemachines Simple Machines Forum 1.0.16Simplemachines Simple Machines Forum 2.0.4Simplemachines Simple Machines Forum 1.0Simplemachines Simple Machines Forum 1.0.9Simplemachines Simple Machines Forum 1.0.23Simplemachines Simple Machines Forum 1.0.21Simplemachines Simple Machines Forum 1.0.6Simplemachines Simple Machines Forum 2.1Simplemachines Simple Machines Forum 2.0.2
4.3
CVSSv2
CVE-2013-7234
Simple Machines Forum (SMF) prior to 1.1.19 and 2.x prior to 2.0.6 allows remote malicious users to conduct clickjacking attacks via an X-Frame-Options header.
Simplemachines Simple Machines Forum 1.0.15Simplemachines Simple Machines Forum 1.1Simplemachines Simple Machines Forum 1.1.6Simplemachines Simple Machines Forum 1.1.15Simplemachines Simple Machines Forum 1.1.8Simplemachines Simple Machines Forum 1.1.5Simplemachines Simple Machines Forum 2.0Simplemachines Simple Machines Forum 1.1.11Simplemachines Simple Machines Forum 1.1.14Simplemachines Simple Machines Forum 1.0.14Simplemachines Simple Machines Forum 1.0.8Simplemachines Simple Machines Forum 1.0Simplemachines Simple Machines Forum 1.1.16Simplemachines Simple Machines Forum 1.1.1Simplemachines Simple Machines ForumSimplemachines Simple Machines Forum 1.0.2Simplemachines Simple Machines Forum 1.0.12Simplemachines Simple Machines Forum 1.0.16Simplemachines Simple Machines Forum 2.0.4Simplemachines Simple Machines Forum 1.0.9Simplemachines Simple Machines Forum 1.0.23Simplemachines Simple Machines Forum 1.0.21
7.5
CVSSv2
CVE-2013-7235
Simple Machines Forum (SMF) prior to 1.1.19 and 2.x prior to 2.0.6 allows remote malicious users to impersonate arbitrary users via multiple space characters characters.
Simplemachines Simple Machines Forum 1.0.15Simplemachines Simple Machines Forum 1.1Simplemachines Simple Machines Forum 1.1.6Simplemachines Simple Machines Forum 1.1.15Simplemachines Simple Machines Forum 1.1.8Simplemachines Simple Machines Forum 1.1.5Simplemachines Simple Machines Forum 2.0Simplemachines Simple Machines Forum 1.1.11Simplemachines Simple Machines Forum 1.1.14Simplemachines Simple Machines Forum 1.0.14Simplemachines Simple Machines Forum 1.0.8Simplemachines Simple Machines Forum 1.0Simplemachines Simple Machines Forum 1.1.16Simplemachines Simple Machines Forum 1.1.1Simplemachines Simple Machines ForumSimplemachines Simple Machines Forum 1.0.2Simplemachines Simple Machines Forum 1.0.12Simplemachines Simple Machines Forum 1.0.16Simplemachines Simple Machines Forum 2.0.4Simplemachines Simple Machines Forum 1.0.9Simplemachines Simple Machines Forum 1.0.23Simplemachines Simple Machines Forum 1.0.21
7.5
CVSSv2
CVE-2008-3072
Simple Machines Forum (SMF) 1.1.x prior to 1.1.5 and 1.0.x prior to 1.0.13, when running in PHP prior to 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors.
Simple Machines Simple Machines Forum
7.5
CVSSv2
CVE-2008-3073
Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.x prior to 1.1.5 and 1.0.x prior to 1.0.13 has unknown impact and attack vectors, probably cross-site scripting (XSS), related to "use of the html-tag."
Simple Machines Simple Machines Forum
7.5
CVSSv2
CVE-2008-6971
The password reset functionality in Simple Machines Forum (SMF) 1.0.x prior to 1.0.14, 1.1.x prior to 1.1.6, and 2.0 prior to 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remo...
Simplemachines Smf 2.0-beta3Simplemachines Smf 2.0Simplemachines Smf 1.1.5Simplemachines Smf 1.1.4Simplemachines Smf 2.0-beta2Simplemachines Smf 1.0.13Simplemachines Smf 1.0.12
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook