436 matches found
Simple Machines Forum XSS / XSRF / PHP Execution
This is the first batch of vulnerabilities found by the SimpleAudit team from elhacker.net http://labs.elhacker.net/simpleaudit Our goal is to evaluate the security of SMF 2.0 before using it on our own server, and we have found several security vulnerabilities. The vulnerabilities that also appl...
40 vulnerabilities in SMF 1.1.10/SMF 2.0RC2 by elhacker.net (Simple Audit)
This is the first batch of vulnerabilities found by the SimpleAudit team from elhacker.net http://labs.elhacker.net/simpleaudit Our goal is to evaluate the security of SMF 2.0 before using it on our own server, and we have found several security vulnerabilities. The vulnerabilities that also appl...
CVE-2008-6971
The password reset functionality in Simple Machines Forum SMF 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify...
CVE-2008-6971
CVE-2008-6971 describes a by-design weakness in Simple Machines Forum (SMF) where password reset codes are generated using an insecure random-number state exposed in a hidden form field. A remote attacker could predict validation codes for the password reset, enabling modification of other users’...
CVE-2008-6971
The password reset functionality in Simple Machines Forum SMF 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify...
CVE-2009-2385
CVE-2009-2385 affects Simple Machines Forum (SMF) — Member Awards component 1.0.2. The vulnerability lies in the awardsMembers function in Sources/Profile.php, where the id parameter in a profile action to index.php can be exploited to perform SQL injection and execute arbitrary SQL commands. Thi...
SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit
No description provided by source. ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru,...
SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================= SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit ======================================================= -----------------------------------------------------------------------...
SMF Member Awards 1.0.2 SQL Injection
------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru, uasc.org.ua...
SMF Mod Member Awards 1.0.2 - Blind SQL Injection
------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru, uasc.org.ua...
Sql injection
SQL injection vulnerability in Load.php in Simple Machines Forum SMF 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by setting the dbcharacterset parameter to a multibyte character set such as big5, which causes the addslashes PHP function to produce a "" backslash...
CVE-2008-6741
CVE-2008-6741 affects Simple Machines Forum (SMF) 1.1.4 and earlier. The vulnerability arises from an SQL injection in Load.php triggered by using a multibyte character set for db_character_set (e.g., big5), where addslashes can fail to quote single quotes, enabling remote SQL execution via a cra...
CVE-2008-6741
SQL injection vulnerability in Load.php in Simple Machines Forum SMF 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by setting the dbcharacterset parameter to a multibyte character set such as big5, which causes the addslashes PHP function to produce a "" backslash...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in index.php in Simple Machines Forum SMF 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote attackers to hijack the authentication of admins for requests that install packages via the package parameter in an install2 action...
CVE-2008-6659
CVE-2008-6659 affects Simple Machines Forum (SMF) 1.x before 1.1.7 (and 1.0 before 1.0.15). The flaw is a directory traversal in index.php via theme_dir in a jsoption action, tied to Sources/QueryString.php and Sources/Themes.php, enabling remote authenticated users to configure arbitrary local f...
CVE-2008-6658
CVE-2008-6658 affects Simple Machines Forum (SMF): directory traversal in index.php allows remote authenticated administrators to install packages from arbitrary directories via package parameter during install2, affecting SMF 1.0.x prior to 1.0.15 and SMF 1.1.x prior to 1.1.7. Impact per descrip...
CVE-2008-6657
SMF 1.x is affected by a CSRF vulnerability in index.php. Versions 1.0 before 1.0.15 and 1.1 before 1.1.7 allow remote attackers to hijack admin authentication for install2 package requests. Impact is admin-level session hijack via crafted requests; exploitation requires no user interaction. The ...
CVE-2008-6544
Concretely, CVE-2008-6544 affects Simple Machines Forum (SMF) 1.1.4. The vulnerability is described as PHP remote file inclusion via the settings[default_theme_dir] parameter to two endpoints: Sources/Subs-Graphics.php and Sources/Themes.php. The underlying issue involves allowing a URL to influe...
SMF 1.1.7 Persistent XSS (requires permision to edit censor)
SMF 1.1.7 simplemachines.org XSS Exploitation: If you can modify the censor on a SMF forum, then you can make it execute arbitrary JS code. http://SMF.Forum.com/index.php?action=postsettings;sa=censor Just add the following entry: http://www.test.xss/ = http://www.test-xss/"...