Simple Machines Forum Session Hijacking Vulnerability

The host is installed with Simple Machines Forum and is prone to session hijacking vulnerability. OpenVAS Vulnerability Test $Id: gbsimplemachinesforumsessionhijackingvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ Simple Machines Forum Session Hijacking Vulnerability Authors: Rachana Shetty...

Simple Machines Forum 2.0 Session Hijacking

Simple Machines forum SMF 2.0 session hijacking Found by The X-C3LL and seth http://0verl0ad.blogspot.com/ || http://xd-blog.com.ar/ 2011-08-06 Website: http://www.simplemachines.org/ Greets: yoyahack, eddyw, www.portalhacker.net SMF stops csrf attacks sending a session token in all the requests...

Simple Machines Forum XSS / XSRF / PHP Execution

This is the first batch of vulnerabilities found by the SimpleAudit team from elhacker.net http://labs.elhacker.net/simpleaudit Our goal is to evaluate the security of SMF 2.0 before using it on our own server, and we have found several security vulnerabilities. The vulnerabilities that also appl...