316 matches found
PT-2007-1292 · Simple Machines · Simple Machines Forum
Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF versions 1.0.7 and earlier Simple Machines Forum SMF version 1.1rc2 and earlier Description: The issue allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in Simple Machines Forum SMF 1.1 RC3 allow remote authenticated users to inject arbitrary web script or HTML via the 1 recipient or 2 BCC field when selecting send in a pm action...
CVE-2006-6375
Cross-site scripting XSS vulnerability in display.php in Simple Machines Forum SMF 1.1 Final and earlier allows remote attackers to inject arbitrary web script or HTML via the contents of a file that is uploaded with the image parameter set, which can be interpreted as script by Internet Explorer...
CVE-2006-6375
CVE-2006-6375 is a cross-site scripting (XSS) flaw in display.php of Simple Machines Forum (SMF) 1.1 Final and earlier. The vulnerability allows remote attackers to inject arbitrary script/HTML via the contents of a file uploaded with the image parameter, which can be interpreted as script by Int...
SMF upload XSS vulnerability
====================================================================== Advisory : SMF upload XSS vulnerability Release Date : December 4th, 2006 Application : Simple Machines Forum Version : SMF 1.1 Final and earlier versions Platform : PHP Vendor URL : http://www.simplemachines.org Authors :...
CVE-2006-5503
Cross-site scripting XSS vulnerability in index.php in Simple Machines Forum SMF 1.1 RC2 allows remote attackers to inject arbitrary web script or HTML via the action parameter...
[Xss] IN SMF 1.1 RC2
InFo ----- Site : www.simplemachines.org Dork : Powered by SMF 1.1 RC2 File : index.php? By : b0rizQ E-Mail : TheFreEKernEl at b0rizQ dot nET email concealed -------------------------------- Xss www.traget.com/index.php?action=login2"scriptalert'xss-by-b0rizQ' /script...
CVE-2006-4564
SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to execute arbitrary SQL commands via the curcat parameter...
CVE-2006-4564
SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to execute arbitrary SQL commands via the curcat parameter...
CVE-2006-4467
Simple Machines Forum SMF 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to perform directory traversal attacks to read...
CVE-2006-4467
The CVE-2006-4467 entry applies to Simple Machines Forum (SMF) 1.1RCx prior to 1.1RC3 and 1.0.x prior to 1.0.8. The issue is a variable-unsetting flaw where input data containing a numeric parameter with a value that matches an alphanumeric parameter’s hash value prevents SMF from unsetting the c...
CVE-2006-4467
Simple Machines Forum SMF 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to perform directory traversal attacks to read...
Simple Machines Forum (SMF) 1.1 rc2 - Lock Topics
Simple Machines Forum SMF 1.1 rc2 - Lock Topics !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i;...
Simple Machines Forum (SMF) 1.1 rc2 - Lock Topics
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i;...
Simple Machines Forum (SMF) 1.1 rc2 (Windows) - lngfile Local File Inclusion
Simple Machines Forum SMF 1.1 rc2 Windows - lngfile Local File Inclusion !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- Simple Machines Forum = 1.1 rc2 "lngfile" ZendHashDelKeyOrIndex/arbitrary local inclusion exploit...
Simple Machines Forum <= 1.1 rc2 (lngfile) Remote Exploit (windows)
Exploit for unknown platform in category web applications =================================================================== Simple Machines Forum = 1.1 rc2 lngfile Remote Exploit windows =================================================================== !/usr/bin/php -q -d shortopentag=on ?...
Simple Machines Forum <= 1.1 rc2 (lngfile) Remote Exploit (windows)
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- Simple Machines Forum = 1.1 rc2 "lngfile" ZendHashDelKeyOrIndex/arbitrary local inclusion exploit Win boxes by rgod [email protected]...
Simple Machines Forum (SMF) 1.1 rc2 (Windows) - 'lngfile' Local File Inclusion
!/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- Simple Machines Forum = 1.1 rc2 "lngfile" ZendHashDelKeyOrIndex/arbitrary local inclusion exploit Win boxes by rgod [email protected] site: http://retrogod.altervista.or...
EV0086.txt
New eVuln Advisory: Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability http://evuln.com/vulns/86/summary.html --------------------Summary---------------- eVuln ID: EV0086 CVE: CVE-2006-0896 Software: Simple Machines Forum - SMF Sowtware's Web Site: http://www.simplemachines.org/...
[eVuln] Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability
New eVuln Advisory: Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability http://evuln.com/vulns/86/summary.html --------------------Summary---------------- eVuln ID: EV0086 CVE: CVE-2006-0896 Software: Simple Machines Forum - SMF Sowtware's Web Site: http://www.simplemachines.org/...