451 matches found
CVE-2011-1130
SMF is affected by SQL injection in the start parameter validation in the code paths cleanRequest (QueryString.php) and constructPageIndex (Subs.php). The issue affects SMF releases before 1.1.13 and 2.x before 2.0 RC5, enabling remote attackers to perform SQL injection, potentially disclose data...
CVE-2011-1128
The loadUserSettings function in Load.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, does not properly handle invalid login attempts, which might make it easier for remote attackers to obtain access or cause a denial of service via a brute-force attack...
CVE-2011-1129
CVE-2011-1129 is a cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) via the EditNews function in ManageNews.php. It affects SMF versions before 1.1.13 and 2.x before 2.0 RC5, where remote authenticated users could inject arbitrary web script or HTML through a save_items act...
CVE-2011-1131
SMF: The PlushSearch2 function in Search.php affects SMF 1.1.13 and SMF 2.x up to 2.0 RC5, where cached data may be used in a scenario with a temporary table, potentially allowing remote attackers to retrieve sensitive information via a search. Impact is a partial confidentiality breach; no integ...
CVE-2011-1129
Cross-site scripting XSS vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a saveitems action...
CVE-2011-1128
The CVE-2011-1128 issue affects Simple Machines Forum (SMF): loadUserSettings in Load.php fails to properly handle invalid login attempts, enabling brute-force access or potential denial of service. Affected: SMF < 1.1.13 and SMF 2.x
SMF 2.0 RC5 Remote Shell Upload Exploit
Exploit for php platform in category web applications Title : SMF 2.0 RC5 Remote Shell Upload Exploit Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote Shell Upload Tested on : Windows X...
SMF 2.0 RC5 Shell Upload
Title : SMF 2.0 RC5 Remote Shell Upload Exploit Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote Shell Upload Tested on : Windows XP sp3 FR » In The name of Allah Go0Gle D0rk : "Power...
Simple Machines Forum <= 1.1.12 XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: XSS PersistentSimple Machines Forum alertdocument.cookie; 0day.today 2018-04-13...
Mambo SMF 1.0.5 Remote File Inclusion
========================================================= Mambo Component comsmf 1.0.5 RFI Vulnerability ========================================================= +Title : Mambo Component comsmf 1.0.5 RFI Vulnerability +Software : SMF 1.0.5 +Vendor : http://mamboserver.com/ +Download :...
Simple Machines Forum 1.1.11 Change Administrator Password
============================================================================ | SMF 1.1.11 change Password Admin | My Home Page : WwW.HackTeacH.CoM | Founded By : ShaDow-D3v1L ============================================================================...
Simple Machines Forum (SMF) 1.1.8 - avatar Remote PHP File Execute
Simple Machines Forum SMF 1.1.8 - avatar Remote PHP File Execute Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum = 1.1.8 avatar rpfe PoC by Jose Luis Gongora Fernandez aka JosS ///vhosts/hack0wn.com/httpdocs/poc.php VICTIM: 88.25.92. info: Mozilla/5.0 X11; U; Linux i686;...
Simple Machines Forum (SMF) 1.1.8 - 'avatar' Remote PHP File Execute
Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum = 1.1.8 avatar rpfe PoC by Jose Luis Gongora Fernandez aka JosS ///vhosts/hack0wn.com/httpdocs/poc.php VICTIM: 88.25.92. info: Mozilla/5.0 X11; U; Linux i686; es-ES; rv:1.8.1.19 Gecko/20081202 Iceweasel/2.0.0.19...
SMF (Simple Machine Forum) 1.1.11 XSS Vulnerabilities
No description provided by source. || Script : SMF Simple Machine Forum 1.1.11 || Vulnerability Type : Active XSS Active Cross Site Scripting || Risk : Low || Discovered By Khashayar Fereidani || http://ircrash.com http://bugtraq.ircrash.com || Note : For use this vulnerability you need access to...
Simple Machines Forum 1.1.11 Cross Site Scripting
|| Script : SMF Simple Machine Forum 1.1.11 || Vulnerability Type : Active XSS Active Cross Site Scripting || Risk : Low || Discovered By Khashayar Fereidani || http://ircrash.com http://bugtraq.ircrash.com || Note : For use this vulnerability you need access to censor words panel . 1.First login...
Simple Machines Forum XSS / XSRF / PHP Execution
This is the first batch of vulnerabilities found by the SimpleAudit team from elhacker.net http://labs.elhacker.net/simpleaudit Our goal is to evaluate the security of SMF 2.0 before using it on our own server, and we have found several security vulnerabilities. The vulnerabilities that also appl...
40 vulnerabilities in SMF 1.1.10/SMF 2.0RC2 by elhacker.net (Simple Audit)
This is the first batch of vulnerabilities found by the SimpleAudit team from elhacker.net http://labs.elhacker.net/simpleaudit Our goal is to evaluate the security of SMF 2.0 before using it on our own server, and we have found several security vulnerabilities. The vulnerabilities that also appl...
CVE-2008-6971
The password reset functionality in Simple Machines Forum SMF 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify...
CVE-2008-6971
CVE-2008-6971 describes a by-design weakness in Simple Machines Forum (SMF) where password reset codes are generated using an insecure random-number state exposed in a hidden form field. A remote attacker could predict validation codes for the password reset, enabling modification of other users’...
CVE-2008-6971
The password reset functionality in Simple Machines Forum SMF 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify...