EUVD-2006-0900

Malware in sbrugna...

EUVD-2005-4882

Malware in sbrugna...

CVE-2005-4891

Simple Machine Forum SMF versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements...

PT-2020-7038

Name of the Vulnerable Software and Affected Versions Simple Machine Forum SMF versions 1.0.4 and earlier Description The issue allows remote attackers to inject arbitrary SQL statements, which is a type of SQL injection vulnerability. This means an attacker can execute unauthorized SQL code on t...

CVE-2005-4891: Improper Neutralization of Special Elements used in an SQL Command

Simple Machine Forum SMF versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements...

SMF (Simple Machine Forum) 2.0.10 - Remote Memory Exfiltration

!/usr/bin/python -- coding: iso-8859-15 -- Title: SMF Simple Machine Forum Filippo Roncari Truel Lab http://lab.truel.it Requirements: SMF = 2.0.10 PHP = 5.6.11 / 5.5.27 / 5.4.43 Advisories: TL-2015-PHP04 http://lab.truel.it/d/advisories/TL-2015-PHP04.txt TL-2015-PHP06...

SMF (Simple Machine Forum) 1.1.11 XSS - Discovered by : Khashayar Fereidani

|| Script : SMF Simple Machine Forum 1.1.11 || Vulnerability Type : Active XSS Active Cross Site Scripting || Risk : Low || Discovered By Khashayar Fereidani || http://ircrash.com http://bugtraq.ircrash.com || Note : For use this vulnerability you need access to censor words panel . 1.First login...

eCardMAX HotEditor 4.0 - Keyboard.php Local File Inclusion

eCardMAX HotEditor 4.0 - Keyboard.php Local File Inclusion source: https://www.securityfocus.com/bid/23377/info eCardMAX HotEditor is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view...

eCardMAX HotEditor 4.0 - 'Keyboard.php' Local File Inclusion

source: https://www.securityfocus.com/bid/23377/info eCardMAX HotEditor is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. HotEditor 4.0 is...

CVE-2006-0896

Cross-site scripting XSS vulnerability in Sources/Register.php in Simple Machine Forum SMF 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header field...

CVE-2006-0896

The CVE-2006-0896 issue affects Simple Machines Forum (SMF) 1.0.6, specifically the Sources/Register.php script. The root cause is improper sanitization of the HTTP_X_FORWARDED_FOR header, enabling a remote attacker to inject arbitrary HTML or script via XSS. Documents indicate an exploit exists ...

CVE-2006-0896

Cross-site scripting XSS vulnerability in Sources/Register.php in Simple Machine Forum SMF 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header field...

CVE-2006-0896: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Sources/Register.php in Simple Machine Forum SMF 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header field...

smf105.txt

Simple Machine Forum 1-0-5 possibly prior versions user IP address / information disclosure software: site: http://www.simplemachines.org/ information disclosure: a user can choose an sumbit an avatar url like this: http://evilsite/image.php where image.php is a file like this: When forum users...