CVE-2013-3757

CVE-2013-3757 affects Oracle Solaris (8–11) in the SMF/File Locking Services component. The linked Nessus/CVSS details describe an easily exploitable, unauthenticated remote vector over NFS that can modify Solaris data and cause partial denial of service. Affected subcomponent is SMF/File Locking...

CVE-2013-3757

Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 allows remote attackers to affect integrity and availability via vectors related to SMF/File Locking Services...

SMF 2.0.4 PHP Code Injection

'.$page; curlclose$ch; // to close 'logged-in' part ?...

SMF - '/index.php' HTML Injection / Multiple PHP Code Injection Vulnerabilities

source: https://www.securityfocus.com/bid/59409/info SMF is prone to an HTML-injection and multiple PHP code-injection vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the affected application and...

SMF - index.php HTML Injection Multiple PHP Code Injection Vulnerabilities

SMF - index.php HTML Injection Multiple PHP Code Injection Vulnerabilities source: https://www.securityfocus.com/bid/59409/info SMF is prone to an HTML-injection and multiple PHP code-injection vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code on ...

Simple Machine Forum 2.0.x < 2.0.4 File Disclosure/Path Traversal

Exploit for php platform in category web applications Exploit Title: SMF /index.php?action=admin;area=logs;sa=errorlog;file=BASE64 ENCODED FILE PATH;line=LINE NUMBER Example : /srv/www/smf/Settings.php : L3Nydi93d3cvc21mL1NldHRpbmdzLnBocA= /etc/passwd : L2V0Yy9wYXNzd2Q= SMF Configuration File...

Simple Machine Forum 2.0.x 2.0.4 - File Disclosure Directory Traversal

Simple Machine Forum 2.0.x 2.0.4 - File Disclosure Directory Traversal Exploit Title: SMF /index.php?action=admin;area=logs;sa=errorlog;file=BASE64 ENCODED FILE PATH;line=LINE NUMBER Example : /srv/www/smf/Settings.php : L3Nydi93d3cvc21mL1NldHRpbmdzLnBocA= /etc/passwd : L2V0Yy9wYXNzd2Q= SMF...

Simple Machine Forum 2.0.x < 2.0.4 - File Disclosure / Directory Traversal

Exploit Title: SMF /index.php?action=admin;area=logs;sa=errorlog;file=BASE64 ENCODED FILE PATH;line=LINE NUMBER Example : /srv/www/smf/Settings.php : L3Nydi93d3cvc21mL1NldHRpbmdzLnBocA= /etc/passwd : L2V0Yy9wYXNzd2Q= SMF Configuration File Disclosure :...

Cross site scripting

Cross-site scripting XSS vulnerability in Simple Machines Forum SMF 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the scheduled parameter to index.php...

CVE-2012-5903

The CVE-2012-5903 entry concerns the Simple Machines Forum (SMF) product, specifically version 2.0.2. The vulnerability is a Cross-Site Scripting (XSS) flaw in the scheduled parameter handling of index.php, enabling remote attackers to inject arbitrary web script or HTML. The root cause is an XSS...

Smf 2.0.2 Cross-Site Scripting Vulnerability

a bug in Smf 2.0.2 that allows to us to occur a Cross-Site Scripting on a Remote machin. Exploit Title : Smf 2.0.2 Cross-Site Scripting Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum/ Software Link : http://www.simplemachines.org Security Risk : High Version : A...

SMF 2.0.2 Cross Site Scripting

Exploit Title : Smf 2.0.2 Cross-Site Scripting Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum/ Software Link : http://www.simplemachines.org Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Powered By...

SMF - view Cross-Site Scripting

SMF - view Cross-Site Scripting source: https://www.securityfocus.com/bid/56223/info SMF is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...

SMF - 'view' Cross-Site Scripting

source: https://www.securityfocus.com/bid/56223/info SMF is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...

SMF 2.0.2 Local File Inclusion

Exploit Title : SMF v2.0.2 Local File Include Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.simplemachines.org/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"SMF 2.0.2 |...

SMF Board v2.0.2 - Multiple Web Vulnerabilities

Title: ====== SMF Board v2.0.2 - Multiple Web Vulnerabilities Date: ===== 2012-06-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=596 VL-ID: ===== 624 Common Vulnerability Scoring System: ==================================== 4.1 Introduction: ============= Simple...

SMF Board 2.0.2 Cross Site Scripting

Title: ====== SMF Board v2.0.2 - Multiple Web Vulnerabilities Date: ===== 2012-06-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=596 VL-ID: ===== 624 Common Vulnerability Scoring System: ==================================== 4.1 Introduction: ============= Simple...

SMF Board v2.0.2 - Multiple Web Vulnerabilities

Document Title: =============== SMF Board v2.0.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=596 Release Date: ============= 2012-06-25 Vulnerability Laboratory ID VL-ID: ==================================== 624 Common...

SMF Board v2.0.2 - Multiple Web Vulnerabilities

Document Title: =============== SMF Board v2.0.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=596 Release Date: ============= 2012-06-25 Vulnerability Laboratory ID VL-ID: ==================================== 624 Common...

SMF 2.0.2 Cross Site Scripting

Exploit Title : SMF 2.0.2 Cross-Site Scripting Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.simplemachines.org Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...