CVE-2008-6971

The password reset functionality in Simple Machines Forum SMF 1.0.x before 1.0.14, 1.1.x before 1.1.6, and 2.0 before 2.0 beta 4 includes clues about the random number generator state within a hidden form field and generates predictable validation codes, which allows remote attackers to modify...

CVE-2008-3073

Unspecified vulnerability in Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting XSS, related to "use of the html-tag."...

CVE-2004-1996

The CVE-2004-1996 issue concerns Simple Machines Forum (SMF) 1.0, where an XSS vulnerability exists in the size tag that could allow remote attackers to inject arbitrary script in web pages. References across NVD/CVE records confirm the vulnerable component is SMF 1.0 and the root cause is improp...