Cross site scripting

Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&", contain the desired script, and end with ";"...

CVE-2008-0775

Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&", contain the desired script, and end with ";"...

CVE-2008-0775

Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&", contain the desired script, and end with ";"...

CVE-2008-0775

CVE-2008-0775 describes an XSS vulnerability in the SMF Shoutbox (versions 1.14–1.16b) where input to the shoutbox form that begins with "&#" and ends with ";" can inject arbitrary script/HTML. The root cause is insufficient input sanitization in sboxDB.php, allowing remote attackers to execute s...

Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS

Simple Machines Forum "SMF Shoutbox" Mod 1.16b-1.14 Reference: http://custom.simplemachines.org/mods/index.php?mod=412 Bug:Persistent XSS SMF Shoutbox is a popular shoutbox mod for Simple Machines Forum.The content of a post variable used to hold the user shout is stored in the database and then...

smfsb-xss.txt

Simple Machines Forum "SMF Shoutbox" Mod 1.16b-1.14 Reference: http://custom.simplemachines.org/mods/index.php?mod=412 Bug:Persistent XSS SMF Shoutbox is a popular shoutbox mod for Simple Machines Forum.The content of a post variable used to hold the user shout is stored in the database and then...

Cross site scripting

Cross-site scripting XSS vulnerability in Simple Machines Forum SMF 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 Itemid or 2 topic arguments...

CVE-2008-0284

Cross-site scripting XSS vulnerability in Simple Machines Forum SMF 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 Itemid or 2 topic arguments...

CVE-2008-0284

CVE-2008-0284 affects Simple Machines Forum (SMF) 1.1.4 and earlier. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the Itemid or topic parameters. Impact described as enabling script execution in the context of the a...

Simple Machines Forum Cross-Site Scripting Vulnerabilities Vulnerabilities

HSC Simple Machines Forum Cross-Site Scripting Vulnerabilities Vulnerabilities Simple Machines Forum allows attackers to exploiting this vulnerability by cross-site scripting and they will be able to obtain detailed information. This may help the attacker steal cookie-based authentication...

simple-xss.txt

HSC Simple Machines Forum Cross-Site Scripting Vulnerabilities Vulnerabilities Simple Machines Forum allows attackers to exploiting this vulnerability by cross-site scripting and they will be able to obtain detailed information. This may help the attacker steal cookie-based authentication...

CVE-2007-5943

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

CVE-2007-5943

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

Simple Machines Forum Search.php SQL Injection

The remote host is running Simple Machines Forum SMF, an open source web forum application written in PHP. The version of Simple Machines Forum installed on the remote host fails to sanitize user input to the 'userspec' parameter used in conjunction with the 'search2' action to the 'index.php'...

Simple Machines Forum < 1.1.4 index.php SMFCookie218 Parameter SQL Injection

Binary data 4257.prm...

Directory traversal

Directory traversal vulnerability in index.php in Simple Machines Forum SMF 1.1.3 allows remote attackers to include local files via unspecified vectors related to the sourcedir parameter or the actionArray hash. NOTE: CVE and multiple third parties dispute this vulnerability because both sourced...

PT-2007-5162 · Simple Machines · Simple Machines Forum

Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF version 1.1.3 Description: A directory traversal issue in index.php allows remote attackers to include local files via unspecified vectors related to the sourcedir parameter or the actionArray hash. However, it is...

CVE-2007-3942

Directory traversal vulnerability in index.php in Simple Machines Forum SMF 1.1.3 allows remote attackers to include local files via unspecified vectors related to the sourcedir parameter or the actionArray hash. NOTE: CVE and multiple third parties dispute this vulnerability because both sourced...

CVE-2007-3942

SMF 1.1.3 is affected by a directory traversal issue in index.php that could allow remote inclusion of local files via the sourcedir parameter or the actionArray hash. The root cause is unclear in some sources, as CVE notes that sourcedir and actionArray are defined before use and disputes exist ...

Authorization

Simple Machines Forum SMF 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated brute-force attack...