SimpleMachinesForum 代码注入漏洞

SimpleMachinesForum is an open source forum software. A code injection vulnerability exists in SimpleMachinesForum version 2.1.1 and earlier versions, which allows an authenticated, remote attacker to execute arbitrary code by inserting vulnerable php code...

Simple Machines Forum (SMF) < 2.0.17 SSRF Vulnerability

Simple Machines Forum SMF is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Simple Machines Forum Code Issue Vulnerability

Simple Machines Forum SMF is an open source web forum system by the SMF team in the United States. A code issue vulnerability exists in Simple Machines Forum SMF release prior to version 2.0.17. No details of the vulnerability are available at this time...

CVE-2019-11574

An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...

CVE-2019-11574

An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...

Server side request forgery (ssrf)

An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...

CVE-2019-11574

Simple Machines Forum (SMF) prior to release 2.0.17 is affected by a server-side request forgery (SSRF) in Subs-Package.php and Subs.php, where user-supplied data is used directly in curl calls. Affects SMF versions before 2.0.17; CVE-2019-11574 details an SSRF condition with high impact per CVSS...

CVE-2019-11574: Server-Side Request Forgery (SSRF)

An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...

PT-2020-9196

Name of the Vulnerable Software and Affected Versions Simple Machines Forum versions prior to 2.0.17 Description An issue was discovered in Simple Machines Forum related to Subs-Package.php and Subs.php, where user-supplied data is used directly in curl calls, leading to a Server-Side Request...

CVE-2013-4395

Simple Machines Forum SMF through 2.0.5 has XSS...

Cross site scripting

Simple Machines Forum SMF through 2.0.5 has XSS...

CVE-2013-4395

Simple Machines Forum SMF through 2.0.5 has XSS...

PT-2020-7497

Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF versions through 2.0.5 Description: The issue affects Simple Machines Forum, allowing for cross-site scripting XSS attacks. Recommendations: For versions through 2.0.5, update to a version that contains a fix for thi...

CVE-2013-4395: Improper Neutralization of Input During Web Page Generation

Simple Machines Forum SMF through 2.0.5 has XSS...

CVE-2013-0192

File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...

Simple Machines Forum (SMF) < 2.0.16 Reverse Tabnabbing Vulnerability

Simple Machine Forum SMF is prone to a reverse tabnabbing vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2019-12490

An issue was discovered in Simple Machines Forum SMF before 2.0.16. Reverse tabnabbing can occur because of use of blank for external links...

CVE-2019-12490

An issue was discovered in Simple Machines Forum SMF before 2.0.16. Reverse tabnabbing can occur because of use of blank for external links...

Code injection

An issue was discovered in Simple Machines Forum SMF before 2.0.16. Reverse tabnabbing can occur because of use of blank for external links...

CVE-2019-12490

SMF contains a reverse tabnabbing flaw (CVE-2019-12490) in which external links opened with _blank can enable credential theft when a user visits a crafted site. Affected: Simple Machines Forum before 2.0.16. Root cause: improper handling of external links (target="_blank"). Impact documented as ...