simplemachines smf 1.0.19 vulnerabilities and exploits

(subscribe to this query)

SSI.php in Simple Machines Forum (SMF) prior to 1.1.13, and 2.x prior to 2.0 RC5, does not properly restrict guest access, which allows remote malicious users to have an unspecified impact via unknown vectors.

Simplemachines Smf Simplemachines Smf 1.0 Simplemachines Smf 1.0.1 Simplemachines Smf 1.0.2 Simplemachines Smf 1.0.3 Simplemachines Smf 1.0.4 Simplemachines Smf 1.0.5 Simplemachines Smf 1.0.6 Simplemachines Smf 1.0.7 Simplemachines Smf 1.0.8 Simplemachines Smf 1.0.9 Simplemachines Smf 1.0.10

The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) prior to 1.1.13, and 2.x prior to 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table...

Simplemachines Smf Simplemachines Smf 1.0 Simplemachines Smf 1.0.1 Simplemachines Smf 1.0.2 Simplemachines Smf 1.0.3 Simplemachines Smf 1.0.4 Simplemachines Smf 1.0.5 Simplemachines Smf 1.0.6 Simplemachines Smf 1.0.7 Simplemachines Smf 1.0.8 Simplemachines Smf 1.0.9 Simplemachines Smf 1.0.10

The loadUserSettings function in Load.php in Simple Machines Forum (SMF) prior to 1.1.13, and 2.x prior to 2.0 RC5, does not properly handle invalid login attempts, which might make it easier for remote malicious users to obtain access or cause a denial of service via a brute-for...

Simplemachines Smf Simplemachines Smf 1.0 Simplemachines Smf 1.0.1 Simplemachines Smf 1.0.2 Simplemachines Smf 1.0.3 Simplemachines Smf 1.0.4 Simplemachines Smf 1.0.5 Simplemachines Smf 1.0.6 Simplemachines Smf 1.0.7 Simplemachines Smf 1.0.8 Simplemachines Smf 1.0.9 Simplemachines Smf 1.0.10

Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) prior to 1.1.13, and 2.x prior to 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a save_items action.

Simplemachines Smf Simplemachines Smf 1.0 Simplemachines Smf 1.0.1 Simplemachines Smf 1.0.2 Simplemachines Smf 1.0.3 Simplemachines Smf 1.0.4 Simplemachines Smf 1.0.5 Simplemachines Smf 1.0.6 Simplemachines Smf 1.0.7 Simplemachines Smf 1.0.8 Simplemachines Smf 1.0.9 Simplemachines Smf 1.0.10

Simple Machines Forum (SMF) prior to 1.1.13, and 2.x prior to 2.0 RC5, does not properly validate the start parameter, which might allow remote malicious users to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, relate...

Simplemachines Smf Simplemachines Smf 1.0 Simplemachines Smf 1.0.1 Simplemachines Smf 1.0.2 Simplemachines Smf 1.0.3 Simplemachines Smf 1.0.4 Simplemachines Smf 1.0.5 Simplemachines Smf 1.0.6 Simplemachines Smf 1.0.7 Simplemachines Smf 1.0.8 Simplemachines Smf 1.0.9 Simplemachines Smf 1.0.10

Multiple SQL injection vulnerabilities in Simple Machines Forum (SMF) prior to 1.1.15 and 2.x prior to 2.0.1 allow remote malicious users to execute arbitrary SQL commands via vectors involving a (1) HTML entity or (2) display name. NOTE: some of these details are obtained from t...

Simplemachines Smf Simplemachines Smf 1.0 Simplemachines Smf 1.0.1 Simplemachines Smf 1.0.2 Simplemachines Smf 1.0.3 Simplemachines Smf 1.0.4 Simplemachines Smf 1.0.5 Simplemachines Smf 1.0.6 Simplemachines Smf 1.0.7 Simplemachines Smf 1.0.8 Simplemachines Smf 1.0.9 Simplemachines Smf 1.0.10

Simple Machines Forum (SMF) 2.0.6, 1.1.19, and previous versions allows remote malicious users to impersonate arbitrary users via a Unicode homoglyph character in a username.

Simplemachines Simple Machines Forum Simplemachines Simple Machines Forum 1.0 Simplemachines Simple Machines Forum 1.0.1 Simplemachines Simple Machines Forum 1.0.2 Simplemachines Simple Machines Forum 1.0.3 Simplemachines Simple Machines Forum 1.0.4 Simplemachines Simple Machines Forum 1.0.5 Simplemachines Simple Machines Forum 1.0.6 Simplemachines Simple Machines Forum 1.0.7 Simplemachines Simple Machines Forum 1.0.8 Simplemachines Simple Machines Forum 1.0.9 Simplemachines Simple Machines Forum 1.0.10

Simple Machines Forum (SMF) prior to 1.1.19 and 2.x prior to 2.0.6 allows remote malicious users to impersonate arbitrary users via multiple space characters characters.

Simplemachines Simple Machines Forum Simplemachines Simple Machines Forum 1.0 Simplemachines Simple Machines Forum 1.0.1 Simplemachines Simple Machines Forum 1.0.2 Simplemachines Simple Machines Forum 1.0.3 Simplemachines Simple Machines Forum 1.0.4 Simplemachines Simple Machines Forum 1.0.5 Simplemachines Simple Machines Forum 1.0.6 Simplemachines Simple Machines Forum 1.0.7 Simplemachines Simple Machines Forum 1.0.8 Simplemachines Simple Machines Forum 1.0.9 Simplemachines Simple Machines Forum 1.0.10

Simple Machines Forum (SMF) prior to 1.1.19 and 2.x prior to 2.0.6 allows remote malicious users to conduct clickjacking attacks via an X-Frame-Options header.

Simplemachines Simple Machines Forum Simplemachines Simple Machines Forum 1.0 Simplemachines Simple Machines Forum 1.0.1 Simplemachines Simple Machines Forum 1.0.2 Simplemachines Simple Machines Forum 1.0.3 Simplemachines Simple Machines Forum 1.0.4 Simplemachines Simple Machines Forum 1.0.5 Simplemachines Simple Machines Forum 1.0.6 Simplemachines Simple Machines Forum 1.0.7 Simplemachines Simple Machines Forum 1.0.8 Simplemachines Simple Machines Forum 1.0.9 Simplemachines Simple Machines Forum 1.0.10

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook