382 matches found
Simple Machines Forum (SMF) 1.1 rc2 (Windows) - 'lngfile' Local File Inclusion
!/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- Simple Machines Forum = 1.1 rc2 "lngfile" ZendHashDelKeyOrIndex/arbitrary local inclusion exploit Win boxes by rgod [email protected] site: http://retrogod.altervista.or...
EV0086.txt
New eVuln Advisory: Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability http://evuln.com/vulns/86/summary.html --------------------Summary---------------- eVuln ID: EV0086 CVE: CVE-2006-0896 Software: Simple Machines Forum - SMF Sowtware's Web Site: http://www.simplemachines.org/...
[eVuln] Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability
New eVuln Advisory: Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability http://evuln.com/vulns/86/summary.html --------------------Summary---------------- eVuln ID: EV0086 CVE: CVE-2006-0896 Software: Simple Machines Forum - SMF Sowtware's Web Site: http://www.simplemachines.org/...
SMF11SQL.txt
KAPDA New advisory Vendor: http://www.simplemachines.org/ Vulnerable Version:SMF 1.1 rc1, Other versions also may be affected. Bug: SQL Injection Exploitation: Remote with browser Description: -------------------- Simple Machines Forum is a most widely used PHP-based message board system that use...
CVE-2005-4159: Undefined Security Weakness
NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum SMF 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter. NOTE: the vendor says that since only one character...
[KAPDA::#16] - SMF SQL Injection
KAPDA New advisory Vendor: http://www.simplemachines.org/ Vulnerable Version:SMF 1.1 rc1, Other versions also may be affected. Bug: SQL Injection Exploitation: Remote with browser Description: -------------------- Simple Machines Forum is a most widely used PHP-based message board system that use...
CVE-2005-2817
Simple Machines Forum SMF 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrated using a PHP script on a malicious server...
CVE-2005-2817
CVE-2005-2817 affects Simple Machines Forum (SMF) 1-0-5 and earlier. The issue arises from using URLs for avatar images, enabling a remote attacker to induce disclosure of sensitive visitor data (e.g., IP address, user agent) via a malicious avatar URL. The vulnerability is demonstrated via PHP o...
CVE-2005-2817: Undefined Security Weakness
Simple Machines Forum SMF 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrated using a PHP script on a malicious server...
Simple Machines Forum < 1.0.7 Code Injection
Binary data 3198.prm...
Simple Machines Forum msg Parameter SQL Injection Vulnerability
The remote host is running Simple Machines Forum SMF, an open source web forum application written in PHP. The installed version of SMF on the remote host fails to properly sanitize input to the 'msg' parameter before using it in SQL queries. By exploiting this flaw, an attacker can affect databa...
Simple Machines Forum < 1.0.5 SQL Injection
Binary data 3028.prm...
Simple Machines Forum <= 1.0.4 (modify) SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= Simple Machines Forum = 1.0.4 modify SQL Injection Exploit ============================================================= !/usr/bin/perl -w SMF Modify SQL Injection // All Versio...
CVE-2004-1996
The CVE-2004-1996 issue concerns Simple Machines Forum (SMF) 1.0, where an XSS vulnerability exists in the size tag that could allow remote attackers to inject arbitrary script in web pages. References across NVD/CVE records confirm the vulnerable component is SMF 1.0 and the root cause is improp...
CVE-2004-1996
Cross-site scripting XSS vulnerability in Simple Machines Forum SMF 1.0 allows remote attackers to inject arbitrary web script via the size tag...
CVE-2004-1996: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Simple Machines Forum SMF 1.0 allows remote attackers to inject arbitrary web script via the size tag...
Simple Machines < 1.1.9 / 2.0.0 RC1 XSS (deprecated)
Binary data 5039.prm...
Simple Machines Forum %lt; 1.1.4 / 1.0.12 SQL Injection
Binary data 4574.prm...
CVE-2004-1996
Cross-site scripting XSS vulnerability in Simple Machines Forum SMF 1.0 allows remote attackers to inject arbitrary web script via the size tag...
SMF SIZE Tag Script Injection Vulnerability
Advisory Name : SMF SIZE Tag Script Injection Vulnerability Release Date : May 3,2004 Application : Simple Machines Test On : SMF 1.0 Beta 5 Public Vendor URL : http://www.simplemachines.org/ Discover : Cheng Peng Suapplesoupatmsn.com Intro: The team that has brought you YaBB SE has moved on to...