326 matches found
CVE-2011-1127
SSI.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors...
CVE-2011-1130
Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which might allow remote attackers to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, related to the cleanRequest functio...
CVE-2011-1131
SMF: The PlushSearch2 function in Search.php affects SMF 1.1.13 and SMF 2.x up to 2.0 RC5, where cached data may be used in a scenario with a temporary table, potentially allowing remote attackers to retrieve sensitive information via a search. Impact is a partial confidentiality breach; no integ...
CVE-2011-1128
The CVE-2011-1128 issue affects Simple Machines Forum (SMF): loadUserSettings in Load.php fails to properly handle invalid login attempts, enabling brute-force access or potential denial of service. Affected: SMF < 1.1.13 and SMF 2.x
Simple Machines Forum <= 1.1.13 XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: XSS PersistentSimple Machines Forum alertdocument.cookie; 0day.today 2018-04-08...
Simple Machines Forum Detection
Simple Machines Forum SMF, an open source web forum application written in PHP, is running on the remote web server. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid47151; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...
Simple Machines Forum 2.0 RC3 Cross Site Request Forgery
Exploit Title: Simple Machines Forum = 2.0 RC3 Sesc theft XSRF Date: 09-06-2010 Author: Xianur0 Software Link: http://download.simplemachines.org/ Version: =2.0 RC3 Tested on: 1.1.11 & 2.0 RC3 Vale, este "bug" es simple, y a decir verdad me parese bastante estupido, pero bueno... xD... El SMF en...
Simple Machines Forum 1.1.8 PHP File Execution
Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum = 1.1.8 avatar rpfe PoC by Jose Luis Gongora Fernandez aka JosS ///vhosts/hack0wn.com/httpdocs/poc.php VICTIM: 88.25.92. info: Mozilla/5.0 X11; U; Linux i686; es-ES; rv:1.8.1.19 Gecko/20...
Simple Machines Forum <= 1.1.8 (avatar) Remote PHP File Execute PoC
Exploit for php platform in category web applications =================================================================== Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum...
Simple Machines Forum (SMF) 1.1.8 - 'avatar' Remote PHP File Execute
Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum = 1.1.8 avatar rpfe PoC by Jose Luis Gongora Fernandez aka JosS ///vhosts/hack0wn.com/httpdocs/poc.php VICTIM: 88.25.92. info: Mozilla/5.0 X11; U; Linux i686; es-ES; rv:1.8.1.19 Gecko/20081202 Iceweasel/2.0.0.19...
Simple Machines Forum < 1.1.11 Multiple Vulnerabilities
Binary data 5250.prm...
Simple Machines Forum (SMF) 1.1.102.0 RC2 - Multiple Vulnerabilities
Simple Machines Forum SMF 1.1.102.0 RC2 - Multiple Vulnerabilities Simple Machines Forum is prone to multiple security vulnerabilities: - A remote PHP code-execution vulnerability - Multiple cross-site scripting vulnerabilities - Multiple cross-site request-forgery vulnerabilities - An...
40 vulnerabilities in SMF 1.1.10/SMF 2.0RC2 by elhacker.net (Simple Audit)
This is the first batch of vulnerabilities found by the SimpleAudit team from elhacker.net http://labs.elhacker.net/simpleaudit Our goal is to evaluate the security of SMF 2.0 before using it on our own server, and we have found several security vulnerabilities. The vulnerabilities that also appl...
CVE-2008-7035
Cross-site scripting XSS vulnerability in an unspecified component in Simple Machines phpRaider 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the resistance field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Cross site scripting
Cross-site scripting XSS vulnerability in an unspecified component in Simple Machines phpRaider 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the resistance field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2008-7035
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2008-7035
Cross-site scripting XSS vulnerability in an unspecified component in Simple Machines phpRaider 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the resistance field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Code injection
The password reset functionality in Simple Machines Forum SMF 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify...
CVE-2008-6971
CVE-2008-6971 describes a by-design weakness in Simple Machines Forum (SMF) where password reset codes are generated using an insecure random-number state exposed in a hidden form field. A remote attacker could predict validation codes for the password reset, enabling modification of other users’...
CVE-2008-6971
The password reset functionality in Simple Machines Forum SMF 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify...