Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

simplemachines simple machines forum 1.0.2 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-7236
Simple Machines Forum (SMF) 2.0.6, 1.1.19, and previous versions allows remote malicious users to impersonate arbitrary users via a Unicode homoglyph character in a username.
Simplemachines Simple Machines Forum 1.1.4Simplemachines Simple Machines Forum 1.1.3Simplemachines Simple Machines Forum 1.1.2Simplemachines Simple Machines Forum 1.1.17Simplemachines Simple Machines Forum 1.1Simplemachines Simple Machines Forum 1.0.9Simplemachines Simple Machines Forum 1.0.18Simplemachines Simple Machines Forum 1.0.17Simplemachines Simple Machines Forum 1.0.16Simplemachines Simple Machines Forum 1.0.15Simplemachines Simple Machines Forum 1.0.14Simplemachines Simple Machines Forum 1.1.7Simplemachines Simple Machines Forum 1.1.5Simplemachines Simple Machines Forum 1.1.16Simplemachines Simple Machines Forum 1.1.14Simplemachines Simple Machines Forum 1.0.7Simplemachines Simple Machines Forum 1.0.5Simplemachines Simple Machines Forum 1.0.21Simplemachines Simple Machines Forum 1.0.2Simplemachines Simple Machines Forum 1.0.13Simplemachines Simple Machines Forum 1.0.10Simplemachines Simple Machines Forum 1.0
NA
CVE-2013-4465
Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum prior to 2.0.6 and 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the fi...
Simplemachines Simple Machines Forum 1.0.15Simplemachines Simple Machines Forum 1.1.6Simplemachines Simple Machines Forum 1.1.15Simplemachines Simple Machines Forum 1.1.8Simplemachines Simple Machines Forum 1.1.5Simplemachines Simple Machines Forum 1.1.11Simplemachines Simple Machines Forum 1.1.14Simplemachines Simple Machines Forum 1.0.14Simplemachines Simple Machines Forum 1.0.8Simplemachines Simple Machines Forum 1.1.16Simplemachines Simple Machines Forum 1.1.1Simplemachines Simple Machines Forum 1.0.2Simplemachines Simple Machines Forum 1.0.12Simplemachines Simple Machines Forum 1.0.16Simplemachines Simple Machines Forum 2.0.4Simplemachines Simple Machines Forum 1.0Simplemachines Simple Machines Forum 1.0.9Simplemachines Simple Machines Forum 1.0.23Simplemachines Simple Machines Forum 1.0.21Simplemachines Simple Machines Forum 1.0.6Simplemachines Simple Machines Forum 2.1Simplemachines Simple Machines Forum 2.0.2
NA
CVE-2013-7234
Simple Machines Forum (SMF) prior to 1.1.19 and 2.x prior to 2.0.6 allows remote malicious users to conduct clickjacking attacks via an X-Frame-Options header.
Simplemachines Simple Machines Forum 1.0.15Simplemachines Simple Machines Forum 1.1Simplemachines Simple Machines Forum 1.1.6Simplemachines Simple Machines Forum 1.1.15Simplemachines Simple Machines Forum 1.1.8Simplemachines Simple Machines Forum 1.1.5Simplemachines Simple Machines Forum 2.0Simplemachines Simple Machines Forum 1.1.11Simplemachines Simple Machines Forum 1.1.14Simplemachines Simple Machines Forum 1.0.14Simplemachines Simple Machines Forum 1.0.8Simplemachines Simple Machines Forum 1.0Simplemachines Simple Machines Forum 1.1.16Simplemachines Simple Machines Forum 1.1.1Simplemachines Simple Machines ForumSimplemachines Simple Machines Forum 1.0.2Simplemachines Simple Machines Forum 1.0.12Simplemachines Simple Machines Forum 1.0.16Simplemachines Simple Machines Forum 2.0.4Simplemachines Simple Machines Forum 1.0.9Simplemachines Simple Machines Forum 1.0.23Simplemachines Simple Machines Forum 1.0.21
NA
CVE-2013-7235
Simple Machines Forum (SMF) prior to 1.1.19 and 2.x prior to 2.0.6 allows remote malicious users to impersonate arbitrary users via multiple space characters characters.
Simplemachines Simple Machines Forum 1.0.15Simplemachines Simple Machines Forum 1.1Simplemachines Simple Machines Forum 1.1.6Simplemachines Simple Machines Forum 1.1.15Simplemachines Simple Machines Forum 1.1.8Simplemachines Simple Machines Forum 1.1.5Simplemachines Simple Machines Forum 2.0Simplemachines Simple Machines Forum 1.1.11Simplemachines Simple Machines Forum 1.1.14Simplemachines Simple Machines Forum 1.0.14Simplemachines Simple Machines Forum 1.0.8Simplemachines Simple Machines Forum 1.0Simplemachines Simple Machines Forum 1.1.16Simplemachines Simple Machines Forum 1.1.1Simplemachines Simple Machines ForumSimplemachines Simple Machines Forum 1.0.2Simplemachines Simple Machines Forum 1.0.12Simplemachines Simple Machines Forum 1.0.16Simplemachines Simple Machines Forum 2.0.4Simplemachines Simple Machines Forum 1.0.9Simplemachines Simple Machines Forum 1.0.23Simplemachines Simple Machines Forum 1.0.21
NA
CVE-2011-1127
SSI.php in Simple Machines Forum (SMF) prior to 1.1.13, and 2.x prior to 2.0 RC5, does not properly restrict guest access, which allows remote malicious users to have an unspecified impact via unknown vectors.
Simplemachines Smf 1.1Simplemachines Smf 1.1.11Simplemachines Smf 1.1.10Simplemachines Smf 1.0Simplemachines Smf 1.0.15Simplemachines Smf 1.0.20Simplemachines Smf 1.0.21Simplemachines Smf 1.1.9Simplemachines Smf 1.1.4Simplemachines Smf 1.0.12Simplemachines Smf 1.0.13Simplemachines Smf 1.0.5Simplemachines Smf 1.0.4Simplemachines Smf 1.0.3Simplemachines Smf 1.0.2Simplemachines Smf 1.1.5Simplemachines Smf 1.1.8Simplemachines Smf 1.0.10Simplemachines SmfSimplemachines Smf 1.0.9Simplemachines Smf 1.0.7Simplemachines Smf 1.0.17
NA
CVE-2011-1129
Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) prior to 1.1.13, and 2.x prior to 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a save_items action.
Simplemachines Smf 1.1.6Simplemachines Smf 1.1.5Simplemachines Smf 1.1.7Simplemachines Smf 1.1.8Simplemachines Smf 1.1.9Simplemachines Smf 1.0.9Simplemachines Smf 1.0.8Simplemachines Smf 1.0.7Simplemachines Smf 1.0.6Simplemachines Smf 1.1.1Simplemachines Smf 1.1.2Simplemachines Smf 1.1.3Simplemachines Smf 1.0Simplemachines Smf 1.1Simplemachines Smf 1.1.10Simplemachines Smf 1.0.12Simplemachines Smf 1.0.10Simplemachines Smf 1.0.15Simplemachines Smf 1.0.4Simplemachines Smf 1.0.2Simplemachines Smf 1.0.14Simplemachines Smf
NA
CVE-2011-3615
Multiple SQL injection vulnerabilities in Simple Machines Forum (SMF) prior to 1.1.15 and 2.x prior to 2.0.1 allow remote malicious users to execute arbitrary SQL commands via vectors involving a (1) HTML entity or (2) display name. NOTE: some of these details are obtained from t...
Simplemachines Smf 1.1.5Simplemachines Smf 1.0Simplemachines Smf 1.1Simplemachines Smf 1.0.2Simplemachines Smf 1.0.3Simplemachines Smf 1.0.8Simplemachines Smf 1.0.9Simplemachines Smf 1.1.9Simplemachines Smf 1.0.10Simplemachines Smf 1.1.1Simplemachines Smf 1.1.2Simplemachines Smf 1.0.17Simplemachines Smf 1.0.1Simplemachines Smf 1.1.12Simplemachines Smf 1.1.11Simplemachines Smf 1.1.13Simplemachines Smf 1.1.3Simplemachines Smf 1.1.4Simplemachines Smf 1.0.13Simplemachines Smf 1.0.12Simplemachines Smf 1.0.4Simplemachines Smf 1.0.5
NA
CVE-2011-1128
The loadUserSettings function in Load.php in Simple Machines Forum (SMF) prior to 1.1.13, and 2.x prior to 2.0 RC5, does not properly handle invalid login attempts, which might make it easier for remote malicious users to obtain access or cause a denial of service via a brute-for...
Simplemachines Smf 1.0Simplemachines Smf 1.1.9Simplemachines Smf 1.1.4Simplemachines Smf 1.0.12Simplemachines Smf 1.0.13Simplemachines Smf 1.0.10Simplemachines Smf 1.0.5Simplemachines Smf 1.0.4Simplemachines Smf 1.0.3Simplemachines Smf 1.0.2Simplemachines Smf 1.1Simplemachines Smf 1.1.11Simplemachines Smf 1.1.10Simplemachines Smf 1.0.15Simplemachines Smf 1.0.16Simplemachines Smf 1.0.21Simplemachines Smf 1.1.5Simplemachines Smf 1.1.8Simplemachines SmfSimplemachines Smf 1.0.9Simplemachines Smf 1.0.7Simplemachines Smf 1.0.17
NA
CVE-2011-1130
Simple Machines Forum (SMF) prior to 1.1.13, and 2.x prior to 2.0 RC5, does not properly validate the start parameter, which might allow remote malicious users to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, relate...
Simplemachines Smf 1.1.7Simplemachines Smf 1.1.8Simplemachines Smf 1.1.9Simplemachines Smf 1.1.4Simplemachines Smf 1.0.8Simplemachines Smf 1.0.7Simplemachines Smf 1.0.6Simplemachines Smf 1.0.5Simplemachines Smf 1.0.4Simplemachines Smf 1.1.2Simplemachines Smf 1.1.3Simplemachines Smf 1.1Simplemachines SmfSimplemachines Smf 1.0Simplemachines Smf 1.0.18Simplemachines Smf 1.0.19Simplemachines Smf 1.0.20Simplemachines Smf 1.0.21Simplemachines Smf 1.1.11Simplemachines Smf 1.1.6Simplemachines Smf 1.0.13Simplemachines Smf 1.0.14
NA
CVE-2011-1131
The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) prior to 1.1.13, and 2.x prior to 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table...
Simplemachines Smf 1.1Simplemachines Smf 1.0.14Simplemachines SmfSimplemachines Smf 1.0Simplemachines Smf 1.0.17Simplemachines Smf 1.0.18Simplemachines Smf 1.0.19Simplemachines Smf 1.0.20Simplemachines Smf 1.1.10Simplemachines Smf 1.0.12Simplemachines Smf 1.0.10Simplemachines Smf 1.0.15Simplemachines Smf 1.0.9Simplemachines Smf 1.0.4Simplemachines Smf 1.0.2Simplemachines Smf 1.1.5Simplemachines Smf 1.1.7Simplemachines Smf 1.1.8Simplemachines Smf 1.1.9Simplemachines Smf 1.0.8Simplemachines Smf 1.0.7Simplemachines Smf 1.0.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook