Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
simplemachines smf 2.0 vulnerabilities and exploits
(subscribe to this query)
4.9
CVSSv3
CVE-2013-0192
File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config.
Simplemachines Simple Machines Forum
1 EDB exploit
7.2
CVSSv3
CVE-2009-5068
There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several "co-admins" that are not trusted beyond the SMF deployment. This vulnerability allows them to read arb...
Simplemachines Simple Machines Forum
1 EDB exploit
NA
CVE-2013-7234
Simple Machines Forum (SMF) prior to 1.1.19 and 2.x prior to 2.0.6 allows remote malicious users to conduct clickjacking attacks via an X-Frame-Options header.
Simplemachines Simple Machines Forum 1.0.15
Simplemachines Simple Machines Forum 1.1
Simplemachines Simple Machines Forum 1.1.6
Simplemachines Simple Machines Forum 1.1.15
Simplemachines Simple Machines Forum 1.1.8
Simplemachines Simple Machines Forum 1.1.5
Simplemachines Simple Machines Forum 2.0
Simplemachines Simple Machines Forum 1.1.11
Simplemachines Simple Machines Forum 1.1.14
Simplemachines Simple Machines Forum 1.0.14
Simplemachines Simple Machines Forum 1.0.8
Simplemachines Simple Machines Forum 1.0
Simplemachines Simple Machines Forum 1.1.16
Simplemachines Simple Machines Forum 1.1.1
Simplemachines Simple Machines Forum
Simplemachines Simple Machines Forum 1.0.2
Simplemachines Simple Machines Forum 1.0.12
Simplemachines Simple Machines Forum 1.0.16
Simplemachines Simple Machines Forum 2.0.4
Simplemachines Simple Machines Forum 1.0.9
Simplemachines Simple Machines Forum 1.0.23
Simplemachines Simple Machines Forum 1.0.21
NA
CVE-2013-7235
Simple Machines Forum (SMF) prior to 1.1.19 and 2.x prior to 2.0.6 allows remote malicious users to impersonate arbitrary users via multiple space characters characters.
Simplemachines Simple Machines Forum 1.0.15
Simplemachines Simple Machines Forum 1.1
Simplemachines Simple Machines Forum 1.1.6
Simplemachines Simple Machines Forum 1.1.15
Simplemachines Simple Machines Forum 1.1.8
Simplemachines Simple Machines Forum 1.1.5
Simplemachines Simple Machines Forum 2.0
Simplemachines Simple Machines Forum 1.1.11
Simplemachines Simple Machines Forum 1.1.14
Simplemachines Simple Machines Forum 1.0.14
Simplemachines Simple Machines Forum 1.0.8
Simplemachines Simple Machines Forum 1.0
Simplemachines Simple Machines Forum 1.1.16
Simplemachines Simple Machines Forum 1.1.1
Simplemachines Simple Machines Forum
Simplemachines Simple Machines Forum 1.0.2
Simplemachines Simple Machines Forum 1.0.12
Simplemachines Simple Machines Forum 1.0.16
Simplemachines Simple Machines Forum 2.0.4
Simplemachines Simple Machines Forum 1.0.9
Simplemachines Simple Machines Forum 1.0.23
Simplemachines Simple Machines Forum 1.0.21
NA
CVE-2011-4173
Cross-site request forgery (CSRF) vulnerability in Simple Machines Forum (SMF) 2.x prior to 2.0.1 allows remote malicious users to hijack the authentication of administrators or moderators via vectors involving image files, a different vulnerability than CVE-2011-3615. NOTE: some...
Simplemachines Smf 2.0
NA
CVE-2011-3615
Multiple SQL injection vulnerabilities in Simple Machines Forum (SMF) prior to 1.1.15 and 2.x prior to 2.0.1 allow remote malicious users to execute arbitrary SQL commands via vectors involving a (1) HTML entity or (2) display name. NOTE: some of these details are obtained from t...
Simplemachines Smf 1.0.13
Simplemachines Smf 1.1.2
Simplemachines Smf 1.0.8
Simplemachines Smf 1.1
Simplemachines Smf 1.0
Simplemachines Smf 1.0.1
Simplemachines Smf 1.0.19
Simplemachines Smf 1.0.7
Simplemachines Smf 1.0.9
Simplemachines Smf 1.0.10
Simplemachines Smf 1.1.4
Simplemachines Smf 1.0.16
Simplemachines Smf 1.0.14
Simplemachines Smf 1.0.17
Simplemachines Smf 1.1.10
Simplemachines Smf
Simplemachines Smf 1.0.21
Simplemachines Smf 1.1.11
Simplemachines Smf 1.1.8
Simplemachines Smf 1.1.13
Simplemachines Smf 1.0.2
Simplemachines Smf 1.1.3
NA
CVE-2011-1127
SSI.php in Simple Machines Forum (SMF) prior to 1.1.13, and 2.x prior to 2.0 RC5, does not properly restrict guest access, which allows remote malicious users to have an unspecified impact via unknown vectors.
Simplemachines Smf 1.0.13
Simplemachines Smf 1.1.2
Simplemachines Smf 1.0.8
Simplemachines Smf 1.1
Simplemachines Smf 1.0
Simplemachines Smf 1.0.1
Simplemachines Smf
Simplemachines Smf 1.0.19
Simplemachines Smf 1.0.7
Simplemachines Smf 1.0.9
Simplemachines Smf 1.0.10
Simplemachines Smf 1.1.4
Simplemachines Smf 1.0.16
Simplemachines Smf 1.0.14
Simplemachines Smf 1.0.17
Simplemachines Smf 1.1.10
Simplemachines Smf 1.0.21
Simplemachines Smf 1.1.11
Simplemachines Smf 1.1.8
Simplemachines Smf 1.0.2
Simplemachines Smf 1.1.3
Simplemachines Smf 1.1.7
NA
CVE-2011-1131
The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) prior to 1.1.13, and 2.x prior to 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table...
Simplemachines Smf 1.0.13
Simplemachines Smf 1.1.2
Simplemachines Smf 1.0.8
Simplemachines Smf 1.1
Simplemachines Smf 1.0
Simplemachines Smf 1.0.1
Simplemachines Smf
Simplemachines Smf 1.0.19
Simplemachines Smf 1.0.7
Simplemachines Smf 1.0.9
Simplemachines Smf 1.0.10
Simplemachines Smf 1.1.4
Simplemachines Smf 1.0.16
Simplemachines Smf 1.0.14
Simplemachines Smf 1.0.17
Simplemachines Smf 1.1.10
Simplemachines Smf 1.0.21
Simplemachines Smf 1.1.11
Simplemachines Smf 1.1.8
Simplemachines Smf 1.0.2
Simplemachines Smf 1.1.3
Simplemachines Smf 1.1.7
NA
CVE-2011-1129
Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) prior to 1.1.13, and 2.x prior to 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a save_items action.
Simplemachines Smf 1.0.13
Simplemachines Smf 1.1.2
Simplemachines Smf 1.0.8
Simplemachines Smf 1.1
Simplemachines Smf 1.0
Simplemachines Smf 1.0.1
Simplemachines Smf
Simplemachines Smf 1.0.19
Simplemachines Smf 1.0.7
Simplemachines Smf 1.0.9
Simplemachines Smf 1.0.10
Simplemachines Smf 1.1.4
Simplemachines Smf 1.0.16
Simplemachines Smf 1.0.14
Simplemachines Smf 1.0.17
Simplemachines Smf 1.1.10
Simplemachines Smf 1.0.21
Simplemachines Smf 1.1.11
Simplemachines Smf 1.1.8
Simplemachines Smf 1.0.2
Simplemachines Smf 1.1.3
Simplemachines Smf 1.1.7
NA
CVE-2011-1130
Simple Machines Forum (SMF) prior to 1.1.13, and 2.x prior to 2.0 RC5, does not properly validate the start parameter, which might allow remote malicious users to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, relate...
Simplemachines Smf 1.0.13
Simplemachines Smf 1.1.2
Simplemachines Smf 1.0.8
Simplemachines Smf 1.1
Simplemachines Smf 1.0
Simplemachines Smf 1.0.1
Simplemachines Smf
Simplemachines Smf 1.0.19
Simplemachines Smf 1.0.7
Simplemachines Smf 1.0.9
Simplemachines Smf 1.0.10
Simplemachines Smf 1.1.4
Simplemachines Smf 1.0.16
Simplemachines Smf 1.0.14
Simplemachines Smf 1.0.17
Simplemachines Smf 1.1.10
Simplemachines Smf 1.0.21
Simplemachines Smf 1.1.11
Simplemachines Smf 1.1.8
Simplemachines Smf 1.0.2
Simplemachines Smf 1.1.3
Simplemachines Smf 1.1.7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »