CVE-2008-3073

Unspecified vulnerability in Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting XSS, related to "use of the html-tag."...

Design/Logic Flaw

Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors...

CVE-2008-3073

Unspecified vulnerability in Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting XSS, related to "use of the html-tag."...

CVE-2008-3072

CVE-2008-3072 affects Simple Machines Forum (SMF) versions 1.1.x prior to 1.1.5 and 1.0.x prior to 1.0.13 when running under PHP versions earlier than 4.2.0. The issue is that the random number generator is not seeded properly, with an impact that is currently described as unknown. The provided d...

CVE-2008-3073

CVE-2008-3073 affects Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13. Description indicates unknown impact and attack vectors, probably cross-site scripting (XSS) related to “use of the html-tag.” NVD CVSS2 base score 7.5 (HIGH) with network vector and low complexity; part...

CVE-2008-2769

PHP remote file inclusion vulnerability in authentication/smf/smf.functions.php in Simple Machines phpRaider 1.0.6 and 1.0.7 allows remote attackers to execute arbitrary PHP code via a URL in the pConfigauthsmfpath parameter...

CVE-2008-2769

PHP remote file inclusion vulnerability in authentication/smf/smf.functions.php in Simple Machines phpRaider 1.0.6 and 1.0.7 allows remote attackers to execute arbitrary PHP code via a URL in the pConfigauthsmfpath parameter...

CVE-2008-2769

CVE-2008-2769 is a PHP remote file inclusion vulnerability affecting Simple Machines phpRaider 1.0.6 and 1.0.7. The flaw resides in authentication/smf/smf.functions.php, allowing an attacker to execute arbitrary PHP code by supplying a URL in the pConfig_auth[smf_path] parameter. Connected source...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger - information leak, crossite scripting. Simple Machines - crossite scripting...

smf114-sql.txt

!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This was a priv8 Exploit...

Simple Machines Forum <= 1.1.4 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ &nbs...

Simple Machines Forum (SMF) 1.1.4 - SQL Injection

!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This was a priv8 Exploit...

Simple Machines Forum <= 1.1.4 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== Simple Machines Forum | |||| /| / / ================================================================================================= This was a priv8 Exploit...

CVE-2008-2019

Simple Machines Forum SMF, probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the WAV file aka audio CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated attack that considers Hamming distances. NOTE: this issue reportedly exists...

CVE-2008-2019

Simple Machines Forum SMF, probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the WAV file aka audio CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated attack that considers Hamming distances. NOTE: this issue reportedly exists...

Deciphering the Simple Machines Forum audio Captcha

The Simple Machine’s Forum audio Captcha that has been hardened from attack. I have contacted SMF about this flaw and it has been verified. I go into greater detail of how i am able to break this captcha here: http://www.rooksecurity.com/blog/?p=6 Exploit Code:...

Simple Machines Forum 1.4

Sibertrwolf c 2008 C AY VE YILDIZ GECE YAKIIR C SonSuza Dek TRK FLSTN KARDEL Alembuysa Kral M.H.P : Smf 1.1.4 Remote File Inclusion Vulnerabilities Download: http://www.simplemachines.org Dork : Powerd by SMF 1.1.4 Exploit:...

Simple Machines Forum (SMF) 1.1.4 - Multiple Remote File Inclusions

Simple Machines Forum SMF 1.1.4 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/28493/info Simple Machines Forum is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit the...

Cross site scripting

Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&", contain the desired script, and end with ";"...

CVE-2008-0775

Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&", contain the desired script, and end with ";"...