Simple Machines Forum (SMF) <= 1.1.8 - (avatar) Remote PHP File Execute PoC

No description provided by source...

Simple Machines Forum <= 1.1.5 Admin Reset Password Exploit (win32)

No description provided by source. ?php echo ---------------------------------------------------------------\n; echo SMF = 1.1.5 Admin Reset Password Exploit win32-based servers\n; echo coded by Raz0r http://Raz0r.name/\n; echo ---------------------------------------------------------------\n; if...

SMF Forum Mambo Component <= 1.3.1.3 Include Vulnerability

No description provided by source. Joomla-SMF Forum Bridge For Mambo 4.5.3+ And Mambo 4.5.3+ Remote File Inclusion Vulnebrality Discovered by : ASIANEAGLE Remote:Yes Level:High --------------------------------------------------------- Application: SMF Forum 1.3.1.3 Bridge Component For Joomla And...

Joomla Component SMF XSS Vulnerability

Joomla! component SMF is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-7236

Simple Machines Forum SMF 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username...

Code injection

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters...

Design/Logic Flaw

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...

CVE-2013-7235

CVE-2013-7235 affects Simple Machines Forum (SMF) prior to 1.1.19 and SMF 2.x prior to 2.0.6. The vulnerability allows remote attackers to impersonate arbitrary users by exploiting multiple consecutive space characters in authentication-related input. The root cause appears to be improper handlin...

CVE-2013-7234

CVE-2013-7234 affects Simple Machines Forum (SMF). The vulnerability exists in SMF versions prior to 1.1.19 and prior to 2.0.6, where an improper handling of the page framing allows remote attackers to perform clickjacking via an X-Frame-Options header. The NVD entry lists this as a remote, heade...

CVE-2013-7236

Simple Machines Forum SMF 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username...

CVE-2013-7235

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters...

CVE-2013-7234

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...

CVE-2013-7236

CVE-2013-7236 affects Simple Machines Forum (SMF) versions 2.0.6, 1.1.19 and earlier. The root cause is a Unicode homoglyph character in a username that allows a remote attacker to impersonate arbitrary users. The public texts report this as a user-impersonation flaw without providing concrete ex...

SMF Forum smf.php mosConfig_absolute_path Parameter PHP Code Execution - Ver2 (CVE-2006-3773)

A code execution vulnerability has been reported in Mambo Smf-forum. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Joomla SMF Cross Site Scripting

Cross Site Scripting on Joomla "comsmf" Risk: Low CWE number: CWE-79 Date: 15/04/2014 Project: www.joomla.org Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php?option=comsmf&itemid= Exploit: -Target: http://host.com -Vuln. File:...

CVE-2013-4465

The CVE-2013-4465 issue affects Simple Machines Forum (SMF) prior to versions 2.0.6 and 2.1, where the avatar upload functionality permits an unrestricted file upload. The root cause is that an uploaded file with an executable extension can be stored and later retrieved via a direct request to a ...

CVE-2013-3757

Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 allows remote attackers to affect integrity and availability via vectors related to SMF/File Locking Services...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 allows remote attackers to affect integrity and availability via vectors related to SMF/File Locking Services...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 11 allows remote attackers to affect integrity via vectors related to Service Management Facility SMF...

CVE-2013-3752

CVE-2013-3752 is a Solaris 11 vulnerability tied to the Service Management Facility (SMF). The Nessus issue bundle notes the Solaris SRU0 patch set for July 2013 addresses an SMF-related flaw affecting Solaris 11, with exploitation via a network vector reported as unauthenticated. The impact desc...