EUVD-2008-6930

Malware in sbrugna...

EUVD-2007-3299

Malware in sbrugna...

EUVD-2005-2818

Malware in sbrugna...

EUVD-2008-6621

Malware in sbrugna...

EUVD-2008-2017

Malware in sbrugna...

EUVD-2013-7224

Malware in sbrugna...

EUVD-2006-4455

Malware in sbrugna...

EUVD-2007-5913

Malware in sbrugna...

EUVD-2011-1145

Malware in sbrugna...

EUVD-2011-4116

Malware in sbrugna...

EUVD-2008-3062

Malware in sbrugna...

EUVD-2011-1142

Malware in sbrugna...

CVE-2013-4465

Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum before 2.0.6 and 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecifie...

CVE-2011-1130

Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which might allow remote attackers to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, related to the cleanRequest functio...

CVE-2011-1131

The PlushSearch2 function in Search.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created,...

CVE-2011-1127

SSI.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors...

CVE-2011-4173

Cross-site request forgery CSRF vulnerability in Simple Machines Forum SMF 2.x before 2.0.1 allows remote attackers to hijack the authentication of administrators or moderators via vectors involving image files, a different vulnerability than CVE-2011-3615. NOTE: some of these details are obtaine...

CVE-2013-4395

Simple Machines Forum SMF through 2.0.5 has XSS...

CVE-2011-1128

The loadUserSettings function in Load.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, does not properly handle invalid login attempts, which might make it easier for remote attackers to obtain access or cause a denial of service via a brute-force attack...

CVE-2011-1129

Cross-site scripting XSS vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a saveitems action...