SMF Portal 1.1.16 Shell Upload

In The Name Of GOD ============================================================================== SMF Portal 1.1.16 fckeditor Arbitrary File Upload Vulnerability ============================================================================== » Title : SMF Portal 1.1.16 fckeditor Arbitrary File...

SMF 2.0.1 - SQL Injection / Privilege Escalation

!/usr/bin/python -- coding: iso-8859-15 -- Exploit Title: Smf = 2.0.1 Sql injection Vulnerability Author: The:Paradox Disclosure date: 06/12/2011 Software Link: http://download.simplemachines.org/ , http://www.php.net/releases/ Smf = 2.0.1 Sql injection Vulnerability - Priviledge escalation explo...

SMF 2.0.1 SQL Injection / Privilege Escalation

!/usr/bin/python -- coding: iso-8859-15 -- Exploit Title: Smf = 2.0.1 Sql injection Vulnerability Author: The:Paradox Disclosure date: 06/12/2011 Software Link: http://download.simplemachines.org/ , http://www.php.net/releases/ Smf = 2.0.1 Sql injection Vulnerability - Priviledge escalation explo...

SMF <= 2.0.1 SQL Injection, Privilege Escalation

Exploit for php platform in category web applications !/usr/bin/python -- coding: iso-8859-15 -- Exploit Title: Smf = 2.0.1 Sql injection Vulnerability Author: The:Paradox Disclosure date: 06/12/2011 Software Link: http://download.simplemachines.org/ , http://www.php.net/releases/ Smf = 2.0.1 Sql...

SMF 2.0.1 - SQL Injection Privilege Escalation

SMF 2.0.1 - SQL Injection Privilege Escalation !/usr/bin/python -- coding: iso-8859-15 -- Exploit Title: Smf = 2.0.1 Sql injection Vulnerability Author: The:Paradox Disclosure date: 06/12/2011 Software Link: http://download.simplemachines.org/ , http://www.php.net/releases/ Smf = 2.0.1 Sql...

SMF Portal 1.1.15 Shell Upload

In The Name Of GOD ============================================================================== SMF Portal 1.1.15 fckeditor Arbitrary File Upload Vulnerability ============================================================================== » Title : SMF Portal 1.1.15 fckeditor Arbitrary File...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Simple Machines Forum SMF 2.x before 2.0.1 allows remote attackers to hijack the authentication of administrators or moderators via vectors involving image files, a different vulnerability than CVE-2011-3615. NOTE: some of these details are obtaine...

CVE-2011-4173

The data confirms CVE-2011-4173 is a CSRF vulnerability in Simple Machines Forum (SMF) 2.x prior to 2.0.1, enabling remote attackers to hijack administrator/moderator sessions via image-file related vectors. Affected product/component: SMF 2.x (before 2.0.1); root cause is a cross-site request fo...

CVE-2011-4173

Cross-site request forgery CSRF vulnerability in Simple Machines Forum SMF 2.x before 2.0.1 allows remote attackers to hijack the authentication of administrators or moderators via vectors involving image files, a different vulnerability than CVE-2011-3615. NOTE: some of these details are obtaine...

CVE-2011-3615

CVE-2011-3615 affects Simple Machines Forum (SMF). Remote attackers can exploit multiple SQL injection vulnerabilities via two vectors: (1) HTML entity handling and (2) display name processing. Affected software includes SMF versions before 1.1.15 and 2.x before 2.0.1. The underlying issue allows...

Simple Machines Forum Session Hijacking Vulnerability

The host is installed with Simple Machines Forum and is prone to session hijacking vulnerability. OpenVAS Vulnerability Test $Id: gbsimplemachinesforumsessionhijackingvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ Simple Machines Forum Session Hijacking Vulnerability Authors: Rachana Shetty...

Simple Machines Forum (SMF) 1.1.142.0 - [img] BBCode Tag Cross-Site Request Forgery

Simple Machines Forum SMF 1.1.142.0 - img BBCode Tag Cross-Site Request Forgery source: https://www.securityfocus.com/bid/49311/info Simple Machines Forum is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative...

Simple Machines Forum 2.0 Session Hijacking

Simple Machines forum SMF 2.0 session hijacking Found by The X-C3LL and seth http://0verl0ad.blogspot.com/ || http://xd-blog.com.ar/ 2011-08-06 Website: http://www.simplemachines.org/ Greets: yoyahack, eddyw, www.portalhacker.net SMF stops csrf attacks sending a session token in all the requests...

Simple Machines forum (SMF) 2.0 session hijacking

Exploit for php platform in category web applications Simple Machines forum SMF 2.0 session hijacking Found by The X-C3LL and seth http://0verl0ad.blogspot.com/ || http://xd-blog.com.ar/ 2011-08-06 Website: http://www.simplemachines.org/ Greets: yoyahack, eddyw, www.portalhacker.net SMF stops csr...

Simple Machines Forum (SMF) 2.0 - Session Hijacking

Simple Machines Forum SMF 2.0 - Session Hijacking Simple Machines forum SMF 2.0 session hijacking Found by The X-C3LL and seth http://0verl0ad.blogspot.com/ || http://xd-blog.com.ar/ 2011-08-06 Website: http://www.simplemachines.org/ Greets: yoyahack, eddyw, www.portalhacker.net SMF stops csrf...

Simple Machine Forum v1.1.10 - Multiple Web Vulnerabilities

Document Title: =============== Simple Machine Forum v1.1.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=118 Release Date: ============= 2011-07-20 Vulnerability Laboratory ID VL-ID: ====================================...

Sql injection

Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which might allow remote attackers to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, related to the cleanRequest functio...

Cross site scripting

Cross-site scripting XSS vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a saveitems action...

Design/Logic Flaw

The PlushSearch2 function in Search.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created,...

CVE-2011-1127

Simple Machines Forum (SMF) is affected by CVE-2011-1127. The issue lies in SSI.php, where guest access is not properly restricted, allowing remote attackers to cause an unspecified impact via unknown vectors. Affected products/versions: SMF 1.1.12 and earlier (pre-1.1.13) and SMF 2.x prior to 2....