simple machines simple machines forum vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

SQL injection vulnerability in Load.php in Simple Machines Forum (SMF) 1.1.4 and previous versions allows remote malicious users to execute arbitrary SQL commands by setting the db_character_set parameter to a multibyte character set such as big5, which causes the addslashes PHP ...

Simple Machines Simple Machines Forum 1.0.11 Simple Machines Simple Machines Forum Simple Machines Simple Machines Forum 1.1 Simple Machines Simple Machines Forum 1.0.5 Simple Machines Simple Machines Forum 1.0.12 Simple Machines Simple Machines Forum 1.1.3 Simple Machines Simple Machines Forum 1.1.1 Simple Machines Simple Machines Forum 1.0.6 Simple Machines Simple Machines Forum 1.0.7 Simple Machines Simple Machines Forum 1.1.2

1 EDB exploit

6.8

CVSSv2

Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 prior to 1.0.15 and 1.1 prior to 1.1.7 allows remote malicious users to hijack the authentication of admins for requests that install packages via the package parameter in an install2 ...

Simple Machines Simple Machines Forum 1.0.5 Simple Machines Simple Machines Forum 1.0.12 Simple Machines Simple Machines Forum 1.1.3 Simple Machines Simple Machines Forum 1.1.4 Simple Machines Simple Machines Forum 1.1 Rc1 Simple Machines Simple Machines Forum 1.1 Rc2 Simple Machines Simple Machines Forum 1.1.1 Simple Machines Simple Machines Forum 1.0.11 Simple Machines Simple Machines Forum 1.1 Rc3 Simple Machines Simple Machines Forum 1.1.2 Simple Machines Simple Machines Forum 1.0.6 Simple Machines Simple Machines Forum 1.0.7 Simple Machines Simple Machines Forum 1.1.5 Simple Machines Simple Machines Forum 1.1.6

1 EDB exploit

4

CVSSv2

Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 prior to 1.0.15 and 1.1 prior to 1.1.7 allows remote authenticated administrators to install packages from arbitrary directories via a .. (dot dot) in the package parameter during an install2 action...

Simple Machines Simple Machines Forum 1.1 Rc1 Simple Machines Simple Machines Forum 1.1 Rc2 Simple Machines Simple Machines Forum 1.0.5 Simple Machines Simple Machines Forum 1.0.12 Simple Machines Simple Machines Forum 1.1.3 Simple Machines Simple Machines Forum 1.1.4 Simple Machines Simple Machines Forum 1.1.5 Simple Machines Simple Machines Forum 1.0.6 Simple Machines Simple Machines Forum 1.0.7 Simple Machines Simple Machines Forum 1.1.6 Simple Machines Simple Machines Forum 1.1.1 Simple Machines Simple Machines Forum 1.0.11 Simple Machines Simple Machines Forum 1.1 Rc3 Simple Machines Simple Machines Forum 1.1.2

1 EDB exploit

5.5

CVSSv2

Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 prior to 1.0.15 and 1.1 prior to 1.1.7 allows remote authenticated users to configure arbitrary local files for execution via directory traversal sequences in the value of the theme_dir field during...

Simple Machines Simple Machines Forum 1.1 Rc2 Simple Machines Simple Machines Forum 1.1 Rc3 Simple Machines Simple Machines Forum 1.0.5 Simple Machines Simple Machines Forum 1.0.12 Simple Machines Simple Machines Forum 1.1.4 Simple Machines Simple Machines Forum 1.1.5 Simple Machines Simple Machines Forum 1.0.6 Simple Machines Simple Machines Forum 1.0.7 Simple Machines Simple Machines Forum 1.1 Rc1 Simple Machines Simple Machines Forum 1.1.6 Simple Machines Simple Machines Forum 1.1.1 Simple Machines Simple Machines Forum 1.0.11 Simple Machines Simple Machines Forum 1.1.2 Simple Machines Simple Machines Forum 1.1.3

1 EDB exploit

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows remote malicious users to inject arbitrary web script or HTML via a base64 encoded params value in the action parameter.

Simple Machines Simple Machines Forum 1.1 Rc3 Simple Machines Simple Machines Forum 1.0.6 Simple Machines Simple Machines Forum 1.0.7 Simple Machines Simple Machines Forum 1.0.5 Simple Machines Simple Machines Forum 1.1 Rc1 Simple Machines Simple Machines Forum 1.1 Rc2

7.5

CVSSv2

Simple Machines Forum (SMF) 2.0.6, 1.1.19, and previous versions allows remote malicious users to impersonate arbitrary users via a Unicode homoglyph character in a username.

Simplemachines Simple Machines Forum 1.1.4 Simplemachines Simple Machines Forum 1.1.3 Simplemachines Simple Machines Forum 1.1.2 Simplemachines Simple Machines Forum 1.1.17 Simplemachines Simple Machines Forum 1.1 Simplemachines Simple Machines Forum 1.0.9 Simplemachines Simple Machines Forum 1.0.18 Simplemachines Simple Machines Forum 1.0.17 Simplemachines Simple Machines Forum 1.0.16 Simplemachines Simple Machines Forum 1.0.15 Simplemachines Simple Machines Forum 1.0.14 Simplemachines Simple Machines Forum 1.1.7 Simplemachines Simple Machines Forum 1.1.5 Simplemachines Simple Machines Forum 1.1.16 Simplemachines Simple Machines Forum 1.1.14 Simplemachines Simple Machines Forum 1.0.7 Simplemachines Simple Machines Forum 1.0.5 Simplemachines Simple Machines Forum 1.0.21 Simplemachines Simple Machines Forum 1.0.2 Simplemachines Simple Machines Forum 1.0.13 Simplemachines Simple Machines Forum 1.0.10 Simplemachines Simple Machines Forum 1.0

4.6

CVSSv2

Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum prior to 2.0.6 and 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the fi...

Simplemachines Simple Machines Forum 1.0.15 Simplemachines Simple Machines Forum 1.1.6 Simplemachines Simple Machines Forum 1.1.15 Simplemachines Simple Machines Forum 1.1.8 Simplemachines Simple Machines Forum 1.1.5 Simplemachines Simple Machines Forum 1.1.11 Simplemachines Simple Machines Forum 1.1.14 Simplemachines Simple Machines Forum 1.0.14 Simplemachines Simple Machines Forum 1.0.8 Simplemachines Simple Machines Forum 1.1.16 Simplemachines Simple Machines Forum 1.1.1 Simplemachines Simple Machines Forum 1.0.2 Simplemachines Simple Machines Forum 1.0.12 Simplemachines Simple Machines Forum 1.0.16 Simplemachines Simple Machines Forum 2.0.4 Simplemachines Simple Machines Forum 1.0 Simplemachines Simple Machines Forum 1.0.9 Simplemachines Simple Machines Forum 1.0.23 Simplemachines Simple Machines Forum 1.0.21 Simplemachines Simple Machines Forum 1.0.6 Simplemachines Simple Machines Forum 2.1 Simplemachines Simple Machines Forum 2.0.2

4.3

CVSSv2

Simple Machines Forum (SMF) prior to 1.1.19 and 2.x prior to 2.0.6 allows remote malicious users to conduct clickjacking attacks via an X-Frame-Options header.

Simplemachines Simple Machines Forum 1.0.15 Simplemachines Simple Machines Forum 1.1 Simplemachines Simple Machines Forum 1.1.6 Simplemachines Simple Machines Forum 1.1.15 Simplemachines Simple Machines Forum 1.1.8 Simplemachines Simple Machines Forum 1.1.5 Simplemachines Simple Machines Forum 2.0 Simplemachines Simple Machines Forum 1.1.11 Simplemachines Simple Machines Forum 1.1.14 Simplemachines Simple Machines Forum 1.0.14 Simplemachines Simple Machines Forum 1.0.8 Simplemachines Simple Machines Forum 1.0 Simplemachines Simple Machines Forum 1.1.16 Simplemachines Simple Machines Forum 1.1.1 Simplemachines Simple Machines Forum Simplemachines Simple Machines Forum 1.0.2 Simplemachines Simple Machines Forum 1.0.12 Simplemachines Simple Machines Forum 1.0.16 Simplemachines Simple Machines Forum 2.0.4 Simplemachines Simple Machines Forum 1.0.9 Simplemachines Simple Machines Forum 1.0.23 Simplemachines Simple Machines Forum 1.0.21

7.5

CVSSv2

Simple Machines Forum (SMF) prior to 1.1.19 and 2.x prior to 2.0.6 allows remote malicious users to impersonate arbitrary users via multiple space characters characters.

Simplemachines Simple Machines Forum 1.0.15 Simplemachines Simple Machines Forum 1.1 Simplemachines Simple Machines Forum 1.1.6 Simplemachines Simple Machines Forum 1.1.15 Simplemachines Simple Machines Forum 1.1.8 Simplemachines Simple Machines Forum 1.1.5 Simplemachines Simple Machines Forum 2.0 Simplemachines Simple Machines Forum 1.1.11 Simplemachines Simple Machines Forum 1.1.14 Simplemachines Simple Machines Forum 1.0.14 Simplemachines Simple Machines Forum 1.0.8 Simplemachines Simple Machines Forum 1.0 Simplemachines Simple Machines Forum 1.1.16 Simplemachines Simple Machines Forum 1.1.1 Simplemachines Simple Machines Forum Simplemachines Simple Machines Forum 1.0.2 Simplemachines Simple Machines Forum 1.0.12 Simplemachines Simple Machines Forum 1.0.16 Simplemachines Simple Machines Forum 2.0.4 Simplemachines Simple Machines Forum 1.0.9 Simplemachines Simple Machines Forum 1.0.23 Simplemachines Simple Machines Forum 1.0.21

6.8

CVSSv2

SQL injection vulnerability in Sources/Search.php in Simple Machines Forum (SMF) 1.1.3, when MySQL 5 is used, allows remote malicious users to execute arbitrary SQL commands via the userspec parameter in a search2 action to index.php.

Simple Machines Simple Machines Forum 1.0.11 Simple Machines Simple Machines Forum 1.1.3

1 EDB exploit

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook