Lucene search

K

Simple Machine Forum Security Vulnerabilities

cve
cve

CVE-2019-11574

An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl...

9.8CVSS

9.3AI Score

0.002EPSS

2020-03-20 11:15 PM
105
cve
cve

CVE-2005-4891

Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL...

9.8CVSS

8AI Score

0.005EPSS

2020-01-15 05:15 PM
24
cve
cve

CVE-2006-0896

Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header...

5.7AI Score

0.013EPSS

2006-02-25 11:02 AM
19