451 matches found
CVE-2018-10305
The MessageSearch2 function in PersonalMessage.php in Simple Machines Forum SMF before 2.0.15 does not properly use the possibleusers variable in a query, which might allow attackers to bypass intended access restrictions...
CVE-2016-5727
LogInOut.php in Simple Machines Forum SMF 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via vectors related to variables derived from user input in a foreach loop...
CVE-2016-5726
Packages.php in Simple Machines Forum SMF 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themechanges array parameter...
Design/Logic Flaw
LogInOut.php in Simple Machines Forum SMF 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via vectors related to variables derived from user input in a foreach loop...
Design/Logic Flaw
Packages.php in Simple Machines Forum SMF 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themechanges array parameter...
CVE-2016-5726
CVE-2016-5726 affects SMF 2.1, where Packages.php is vulnerable to a PHP object injection via the themechanges array parameter, enabling remote code execution. The vulnerability stems from how user-supplied data within that parameter is processed, allowing an attacker to craft payloads that execu...
CVE-2016-5726
Packages.php in Simple Machines Forum SMF 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themechanges array parameter...
CVE-2016-5727
CVE-2016-5727 affects Simple Machines Forum (SMF) 2.1. The vulnerability allows remote attackers to perform PHP object injection and execute arbitrary PHP code via vectors related to variables derived from user input in a foreach loop. The description indicates an input-derived injection in LogIn...
SMF 2.1 Beta 2 Remote Code Execution 0day Exploit
SMF 2.1 Beta 2 0day Exploit allow a remote attacker with the ability to create a basic user account to execute arbitrary code with the privileges of the application. You use python exploit and can authomatic shell upload and remote code execution Usage Info example Remote code execution: exploit....
SMF (Simple Machine Forum) 2.0.10 Remote Memory Exfiltration
!/usr/bin/python -- coding: iso-8859-15 -- Title: SMF Simple Machine Forum Filippo Roncari Truel Lab http://lab.truel.it Requirements: SMF = 2.0.10 PHP = 5.6.11 / 5.5.27 / 5.4.43 Advisories: TL-2015-PHP04 http://lab.truel.it/d/advisories/TL-2015-PHP04.txt TL-2015-PHP06...
SMF 2.0.x Remote Code Execution 0day Exploit
When used in conjunction, multiple vulnerabilities within SMF 2.0.x allow a remote attacker with the ability to create a basic user account to execute arbitrary code with the privileges of the application. This is private exploit. You can buy it at https://0day.today...
SMF Flood Filter Issue
Exploit Title: SMF Incorrect Flood Filter Headers Date: 21/08/2014 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Simple Machine Forum http://www.simplemachines.org Tested on: Linux DORK: Try yourself ; !/usr/bin/python...
Simple Machine Forum 2.0.x < 2.0.4 File Disclosure/Path Traversal
No description provided by source. Exploit Title: SMF 2.0.4 File Disclosure/Path Traversal Google Dork: Powered by SMF 2.0.x Date: 02/02/2013 Exploit Author: NightlyDev Software Link: http://download.simplemachines.org/index.php?thanks;filename=smf2-0-3install.zip Version: 2.0.x 2.0.4 Tested on:...
SMF <= 1.1.4 - Audio CAPTCHA Security Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28866/info SMF Simple Machine Forum is prone to a security-bypass vulnerability that occurs in the audio CAPTCHA protocol. Successfully exploiting this issue may allow attackers to send unsolicited spam or perform other...
phpRaid <= 3.0.b3 (phpBB/SMF) Remote File Inclusion Vulnerabilities
No description provided by source. Kurdish Security Advisory phpRaid Remote File Include PHPBB/SMF : Sosyalizim'de .srar insan olmakta .srard.r Abdullah Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com & [email protected] Script : phpRaid Script Website :...
SMF Mod Member Awards 1.0.2 - Blind SQL Injection Exploit
No description provided by source. ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru,...
Simple Machines Forum 1.0/1.1 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20629/info Simple Machines Forum is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...
Joomla-SMF Forum 1.1.4 Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27218/info Joomla-SMF Forum is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in th...
SMF <= 2.0.1 - SQL Injection, Privilege Escalation
No description provided by source...
SMF 1.1 Index.PHP HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22143/info SMF is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would execute i...