298 matches found
CVE-2008-3072
Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors...
CVE-2008-3073
CVE-2008-3073 affects Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13. Description indicates unknown impact and attack vectors, probably cross-site scripting (XSS) related to “use of the html-tag.” NVD CVSS2 base score 7.5 (HIGH) with network vector and low complexity; part...
CVE-2008-3073
Unspecified vulnerability in Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting XSS, related to "use of the html-tag."...
CVE-2008-3072
CVE-2008-3072 affects Simple Machines Forum (SMF) versions 1.1.x prior to 1.1.5 and 1.0.x prior to 1.0.13 when running under PHP versions earlier than 4.2.0. The issue is that the random number generator is not seeded properly, with an impact that is currently described as unknown. The provided d...
Simple Machines Forum <= 1.1.4 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ &nbs...
smf114-sql.txt
!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This was a priv8 Exploit...
Simple Machines Forum <= 1.1.4 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =========================================================== Simple Machines Forum | |||| /| / / ================================================================================================= This was a priv8 Exploit...
Simple Machines Forum (SMF) 1.1.4 - SQL Injection
!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This was a priv8 Exploit...
CVE-2008-2019
Simple Machines Forum SMF, probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the WAV file aka audio CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated attack that considers Hamming distances. NOTE: this issue reportedly exists...
CVE-2008-2019
Simple Machines Forum SMF, probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the WAV file aka audio CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated attack that considers Hamming distances. NOTE: this issue reportedly exists...
Deciphering the Simple Machines Forum audio Captcha
The Simple Machine’s Forum audio Captcha that has been hardened from attack. I have contacted SMF about this flaw and it has been verified. I go into greater detail of how i am able to break this captcha here: http://www.rooksecurity.com/blog/?p=6 Exploit Code:...
Simple Machines Forum 1.4
Sibertrwolf c 2008 C AY VE YILDIZ GECE YAKIIR C SonSuza Dek TRK FLSTN KARDEL Alembuysa Kral M.H.P : Smf 1.1.4 Remote File Inclusion Vulnerabilities Download: http://www.simplemachines.org Dork : Powerd by SMF 1.1.4 Exploit:...
Simple Machines Forum (SMF) 1.1.4 - Multiple Remote File Inclusions
Simple Machines Forum SMF 1.1.4 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/28493/info Simple Machines Forum is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit the...
CVE-2008-0775
Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&", contain the desired script, and end with ";"...
Cross site scripting
Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&", contain the desired script, and end with ";"...
CVE-2008-0775
CVE-2008-0775 describes an XSS vulnerability in the SMF Shoutbox (versions 1.14–1.16b) where input to the shoutbox form that begins with "&#" and ends with ";" can inject arbitrary script/HTML. The root cause is insufficient input sanitization in sboxDB.php, allowing remote attackers to execute s...
CVE-2008-0775
Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&", contain the desired script, and end with ";"...
Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS
Simple Machines Forum "SMF Shoutbox" Mod 1.16b-1.14 Reference: http://custom.simplemachines.org/mods/index.php?mod=412 Bug:Persistent XSS SMF Shoutbox is a popular shoutbox mod for Simple Machines Forum.The content of a post variable used to hold the user shout is stored in the database and then...
smfsb-xss.txt
Simple Machines Forum "SMF Shoutbox" Mod 1.16b-1.14 Reference: http://custom.simplemachines.org/mods/index.php?mod=412 Bug:Persistent XSS SMF Shoutbox is a popular shoutbox mod for Simple Machines Forum.The content of a post variable used to hold the user shout is stored in the database and then...
Cross site scripting
Cross-site scripting XSS vulnerability in Simple Machines Forum SMF 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 Itemid or 2 topic arguments...