Simple Machines Forum <= 1.1.5 Admin Reset Password Exploit (win32)

No description provided by source. ?php echo ---------------------------------------------------------------\n; echo SMF = 1.1.5 Admin Reset Password Exploit win32-based servers\n; echo coded by Raz0r http://Raz0r.name/\n; echo ---------------------------------------------------------------\n; if...

Simple Machines Forum (SMF) <= 1.1.8 - (avatar) Remote PHP File Execute PoC

No description provided by source...

Simple Machines Forum 1.0/1.1 Index.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20629/info Simple Machines Forum is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

SMF Forum Mambo Component <= 1.3.1.3 Include Vulnerability

No description provided by source. Joomla-SMF Forum Bridge For Mambo 4.5.3+ And Mambo 4.5.3+ Remote File Inclusion Vulnebrality Discovered by : ASIANEAGLE Remote:Yes Level:High --------------------------------------------------------- Application: SMF Forum 1.3.1.3 Bridge Component For Joomla And...

Joomla-SMF Forum 1.1.4 Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/27218/info Joomla-SMF Forum is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in th...

Simple Machine Forum 2.0.x < 2.0.4 File Disclosure/Path Traversal

No description provided by source. Exploit Title: SMF 2.0.4 File Disclosure/Path Traversal Google Dork: Powered by SMF 2.0.x Date: 02/02/2013 Exploit Author: NightlyDev Software Link: http://download.simplemachines.org/index.php?thanks;filename=smf2-0-3install.zip Version: 2.0.x 2.0.4 Tested on:...

SMF <= 2.0.1 - SQL Injection, Privilege Escalation

No description provided by source...

SMF Mod Member Awards 1.0.2 - Blind SQL Injection Exploit

No description provided by source. ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru,...

Joomla Component SMF XSS Vulnerability

Joomla! component SMF is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-7236

Simple Machines Forum SMF 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username...

Code injection

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters...

Design/Logic Flaw

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...

CVE-2013-7234

CVE-2013-7234 affects Simple Machines Forum (SMF). The vulnerability exists in SMF versions prior to 1.1.19 and prior to 2.0.6, where an improper handling of the page framing allows remote attackers to perform clickjacking via an X-Frame-Options header. The NVD entry lists this as a remote, heade...

CVE-2013-7235

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters...

CVE-2013-7236

Simple Machines Forum SMF 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username...

CVE-2013-7235

CVE-2013-7235 affects Simple Machines Forum (SMF) prior to 1.1.19 and SMF 2.x prior to 2.0.6. The vulnerability allows remote attackers to impersonate arbitrary users by exploiting multiple consecutive space characters in authentication-related input. The root cause appears to be improper handlin...

CVE-2013-7234

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...

CVE-2013-7236

CVE-2013-7236 affects Simple Machines Forum (SMF) versions 2.0.6, 1.1.19 and earlier. The root cause is a Unicode homoglyph character in a username that allows a remote attacker to impersonate arbitrary users. The public texts report this as a user-impersonation flaw without providing concrete ex...

SMF Forum smf.php mosConfig_absolute_path Parameter PHP Code Execution - Ver2 (CVE-2006-3773)

A code execution vulnerability has been reported in Mambo Smf-forum. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla SMF Cross Site Scripting

Cross Site Scripting on Joomla "comsmf" Risk: Low CWE number: CWE-79 Date: 15/04/2014 Project: www.joomla.org Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php?option=comsmf&itemid= Exploit: -Target: http://host.com -Vuln. File:...