Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
simple machines simple machines forum vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2006-7013
QueryString.php in Simple Machines Forum (SMF) 1.0.7 and previous versions, and 1.1rc2 and previous versions, allows remote malicious users to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP header, which is preferred instead of other more r...
Simple Machines Simple Machines Forum
NA
CVE-2006-4467
Simple Machines Forum (SMF) 1.1RCx prior to 1.1RC3, and 1.0.x prior to 1.0.8, does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote malicious users to perform direc...
Simple Machines Simple Machines Forum
NA
CVE-2008-3072
Simple Machines Forum (SMF) 1.1.x prior to 1.1.5 and 1.0.x prior to 1.0.13, when running in PHP prior to 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors.
Simple Machines Simple Machines Forum
NA
CVE-2008-3073
Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.x prior to 1.1.5 and 1.0.x prior to 1.0.13 has unknown impact and attack vectors, probably cross-site scripting (XSS), related to "use of the html-tag."
Simple Machines Simple Machines Forum
NA
CVE-2005-4159
NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum (SMF) 1.1 rc1 and previous versions allows remote malicious users to execute arbitrary SQL commands via the start parameter. NOTE: the vendor...
Simple Machines Simple Machines Forum
NA
CVE-2007-2546
Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and previous versions allows remote malicious users to hijack web sessions by setting the PHPSESSID parameter.
Simple Machines Simple Machines Forum
NA
CVE-2007-3942
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.1.3 allows remote malicious users to include local files via unspecified vectors related to the sourcedir parameter or the actionArray hash. NOTE: CVE and multiple third parties dispute this vulnerabi...
Simple Machines Simple Machines Forum 1.1.3
NA
CVE-2006-5503
Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2 allows remote malicious users to inject arbitrary web script or HTML via the action parameter.
Simple Machines Simple Machines Forum 1.1 Rc2
1 EDB exploit
NA
CVE-2005-2817
Simple Machines Forum (SMF) 1-0-5 and previous versions supports the use of URLs for avatar images, which allows remote malicious users to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrated using a PHP script on a malicious server.
Simple Machines Simple Machines Forum 1.0.5
NA
CVE-2006-0896
Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1.0.6 allows remote malicious users to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header field.
Simple Machines Simple Machines Forum 1.0.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30043
camera
CVE-2023-40404
CVE-2024-2793
client side
CVE-2024-4469
CVE-2024-3565
CVE-2024-29825
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »