305 matches found
CVE-2006-4467
Simple Machines Forum SMF 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to perform directory traversal attacks to read...
CVE-2006-4467
Simple Machines Forum SMF 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to perform directory traversal attacks to read...
CVE-2006-4467
The CVE-2006-4467 entry applies to Simple Machines Forum (SMF) 1.1RCx prior to 1.1RC3 and 1.0.x prior to 1.0.8. The issue is a variable-unsetting flaw where input data containing a numeric parameter with a value that matches an alphanumeric parameter’s hash value prevents SMF from unsetting the c...
Simple Machines Forum (SMF) 1.1 rc2 - Lock Topics
Simple Machines Forum SMF 1.1 rc2 - Lock Topics !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i;...
Simple Machines Forum (SMF) 1.1 rc2 - Lock Topics
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i;...
Simple Machines Forum <= 1.1 rc2 (lngfile) Remote Exploit (windows)
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- Simple Machines Forum = 1.1 rc2 "lngfile" ZendHashDelKeyOrIndex/arbitrary local inclusion exploit Win boxes by rgod [email protected]...
Simple Machines Forum (SMF) 1.1 rc2 (Windows) - lngfile Local File Inclusion
Simple Machines Forum SMF 1.1 rc2 Windows - lngfile Local File Inclusion !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- Simple Machines Forum = 1.1 rc2 "lngfile" ZendHashDelKeyOrIndex/arbitrary local inclusion exploit...
Simple Machines Forum <= 1.1 rc2 (lngfile) Remote Exploit (windows)
Exploit for unknown platform in category web applications =================================================================== Simple Machines Forum = 1.1 rc2 lngfile Remote Exploit windows =================================================================== !/usr/bin/php -q -d shortopentag=on ?...
Simple Machines Forum (SMF) 1.1 rc2 (Windows) - 'lngfile' Local File Inclusion
!/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- Simple Machines Forum = 1.1 rc2 "lngfile" ZendHashDelKeyOrIndex/arbitrary local inclusion exploit Win boxes by rgod [email protected] site: http://retrogod.altervista.or...
EV0086.txt
New eVuln Advisory: Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability http://evuln.com/vulns/86/summary.html --------------------Summary---------------- eVuln ID: EV0086 CVE: CVE-2006-0896 Software: Simple Machines Forum - SMF Sowtware's Web Site: http://www.simplemachines.org/...
[eVuln] Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability
New eVuln Advisory: Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability http://evuln.com/vulns/86/summary.html --------------------Summary---------------- eVuln ID: EV0086 CVE: CVE-2006-0896 Software: Simple Machines Forum - SMF Sowtware's Web Site: http://www.simplemachines.org/...
SMF11SQL.txt
KAPDA New advisory Vendor: http://www.simplemachines.org/ Vulnerable Version:SMF 1.1 rc1, Other versions also may be affected. Bug: SQL Injection Exploitation: Remote with browser Description: -------------------- Simple Machines Forum is a most widely used PHP-based message board system that use...
[KAPDA::#16] - SMF SQL Injection
KAPDA New advisory Vendor: http://www.simplemachines.org/ Vulnerable Version:SMF 1.1 rc1, Other versions also may be affected. Bug: SQL Injection Exploitation: Remote with browser Description: -------------------- Simple Machines Forum is a most widely used PHP-based message board system that use...
CVE-2005-2817
Simple Machines Forum SMF 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrated using a PHP script on a malicious server...
CVE-2005-2817
CVE-2005-2817 affects Simple Machines Forum (SMF) 1-0-5 and earlier. The issue arises from using URLs for avatar images, enabling a remote attacker to induce disclosure of sensitive visitor data (e.g., IP address, user agent) via a malicious avatar URL. The vulnerability is demonstrated via PHP o...
Simple Machines Forum < 1.0.7 Code Injection
Binary data 3198.prm...
Simple Machines Forum msg Parameter SQL Injection Vulnerability
The remote host is running Simple Machines Forum SMF, an open source web forum application written in PHP. The installed version of SMF on the remote host fails to properly sanitize input to the 'msg' parameter before using it in SQL queries. By exploiting this flaw, an attacker can affect databa...
Simple Machines Forum < 1.0.5 SQL Injection
Binary data 3028.prm...
Simple Machines Forum <= 1.0.4 (modify) SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= Simple Machines Forum = 1.0.4 modify SQL Injection Exploit ============================================================= !/usr/bin/perl -w SMF Modify SQL Injection // All Versio...
CVE-2004-1996
The CVE-2004-1996 issue concerns Simple Machines Forum (SMF) 1.0, where an XSS vulnerability exists in the size tag that could allow remote attackers to inject arbitrary script in web pages. References across NVD/CVE records confirm the vulnerable component is SMF 1.0 and the root cause is improp...