simple machines simple machines forum 1.1 rc3 vulnerabilities and exploits

(subscribe to this query)

Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 prior to 1.0.15 and 1.1 prior to 1.1.7 allows remote malicious users to hijack the authentication of admins for requests that install packages via the package parameter in an install2 ...

Simple Machines Simple Machines Forum 1.0.11 Simple Machines Simple Machines Forum 1.1.5 Simple Machines Simple Machines Forum 1.1.1 Simple Machines Simple Machines Forum 1.0.7 Simple Machines Simple Machines Forum 1.1.4 Simple Machines Simple Machines Forum 1.1 Rc1 Simple Machines Simple Machines Forum 1.0.5 Simple Machines Simple Machines Forum 1.1.6 Simple Machines Simple Machines Forum 1.1 Rc3 Simple Machines Simple Machines Forum 1.1 Rc2 Simple Machines Simple Machines Forum 1.1.3 Simple Machines Simple Machines Forum 1.0.6 Simple Machines Simple Machines Forum 1.1.2 Simple Machines Simple Machines Forum 1.0.12

1 EDB exploit

Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 prior to 1.0.15 and 1.1 prior to 1.1.7 allows remote authenticated administrators to install packages from arbitrary directories via a .. (dot dot) in the package parameter during an install2 action...

Simple Machines Simple Machines Forum 1.0.11 Simple Machines Simple Machines Forum 1.1.5 Simple Machines Simple Machines Forum 1.1.1 Simple Machines Simple Machines Forum 1.0.7 Simple Machines Simple Machines Forum 1.1.4 Simple Machines Simple Machines Forum 1.1 Rc1 Simple Machines Simple Machines Forum 1.0.5 Simple Machines Simple Machines Forum 1.1.6 Simple Machines Simple Machines Forum 1.1 Rc3 Simple Machines Simple Machines Forum 1.1 Rc2 Simple Machines Simple Machines Forum 1.1.3 Simple Machines Simple Machines Forum 1.0.6 Simple Machines Simple Machines Forum 1.1.2 Simple Machines Simple Machines Forum 1.0.12

1 EDB exploit

Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 prior to 1.0.15 and 1.1 prior to 1.1.7 allows remote authenticated users to configure arbitrary local files for execution via directory traversal sequences in the value of the theme_dir field during...

Simple Machines Simple Machines Forum 1.0.11 Simple Machines Simple Machines Forum 1.1.5 Simple Machines Simple Machines Forum 1.1.1 Simple Machines Simple Machines Forum 1.0.7 Simple Machines Simple Machines Forum 1.1.4 Simple Machines Simple Machines Forum 1.1 Rc1 Simple Machines Simple Machines Forum 1.0.5 Simple Machines Simple Machines Forum 1.1.6 Simple Machines Simple Machines Forum 1.1 Rc3 Simple Machines Simple Machines Forum 1.1 Rc2 Simple Machines Simple Machines Forum 1.1.3 Simple Machines Simple Machines Forum 1.0.6 Simple Machines Simple Machines Forum 1.1.2 Simple Machines Simple Machines Forum 1.0.12

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1.1 RC3 allow remote authenticated users to inject arbitrary web script or HTML via the (1) recipient or (2) BCC field when selecting send in a pm action.

Simple Machines Simple Machines Forum 1.1 Rc3

1 EDB exploit

Cross-site scripting (XSS) vulnerability in display.php in Simple Machines Forum (SMF) 1.1 Final and previous versions allows remote malicious users to inject arbitrary web script or HTML via the contents of a file that is uploaded with the image parameter set, which can be inter...

Simple Machines Smf 1.0.9 Simple Machines Smf 1.1 Rc3 Simple Machines Smf 1.0 Beta5p Simple Machines Smf 1.1 Final

Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows remote malicious users to inject arbitrary web script or HTML via a base64 encoded params value in the action parameter.

Simple Machines Simple Machines Forum 1.0.7 Simple Machines Simple Machines Forum 1.1 Rc1 Simple Machines Simple Machines Forum 1.0.5 Simple Machines Simple Machines Forum 1.1 Rc3 Simple Machines Simple Machines Forum 1.1 Rc2 Simple Machines Simple Machines Forum 1.0.6

SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote malicious users to execute arbitrary SQL commands via the cur_cat parameter.

Simplemachines Smf 1.1

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook