Simple Machine Forum v1.1.10 - Multiple Web Vulnerabilities

Document Title: =============== Simple Machine Forum v1.1.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=118 Release Date: ============= 2011-07-20 Vulnerability Laboratory ID VL-ID: ====================================...

Design/Logic Flaw

The PlushSearch2 function in Search.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created,...

Cross site scripting

Cross-site scripting XSS vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a saveitems action...

Sql injection

Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, does not properly validate the start parameter, which might allow remote attackers to conduct SQL injection attacks, obtain sensitive information, or cause a denial of service via a crafted value, related to the cleanRequest functio...

CVE-2011-1129

Cross-site scripting XSS vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a saveitems action...

CVE-2011-1127

Simple Machines Forum (SMF) is affected by CVE-2011-1127. The issue lies in SSI.php, where guest access is not properly restricted, allowing remote attackers to cause an unspecified impact via unknown vectors. Affected products/versions: SMF 1.1.12 and earlier (pre-1.1.13) and SMF 2.x prior to 2....

CVE-2011-1130

SMF is affected by SQL injection in the start parameter validation in the code paths cleanRequest (QueryString.php) and constructPageIndex (Subs.php). The issue affects SMF releases before 1.1.13 and 2.x before 2.0 RC5, enabling remote attackers to perform SQL injection, potentially disclose data...

CVE-2011-1131

SMF: The PlushSearch2 function in Search.php affects SMF 1.1.13 and SMF 2.x up to 2.0 RC5, where cached data may be used in a scenario with a temporary table, potentially allowing remote attackers to retrieve sensitive information via a search. Impact is a partial confidentiality breach; no integ...

CVE-2011-1129

CVE-2011-1129 is a cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) via the EditNews function in ManageNews.php. It affects SMF versions before 1.1.13 and 2.x before 2.0 RC5, where remote authenticated users could inject arbitrary web script or HTML through a save_items act...

CVE-2011-1128

The CVE-2011-1128 issue affects Simple Machines Forum (SMF): loadUserSettings in Load.php fails to properly handle invalid login attempts, enabling brute-force access or potential denial of service. Affected: SMF < 1.1.13 and SMF 2.x

CVE-2011-1128

The loadUserSettings function in Load.php in Simple Machines Forum SMF before 1.1.13, and 2.x before 2.0 RC5, does not properly handle invalid login attempts, which might make it easier for remote attackers to obtain access or cause a denial of service via a brute-force attack...

SMF 2.0 RC5 Remote Shell Upload Exploit

Exploit for php platform in category web applications Title : SMF 2.0 RC5 Remote Shell Upload Exploit Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote Shell Upload Tested on : Windows X...

SMF 2.0 RC5 Shell Upload

Title : SMF 2.0 RC5 Remote Shell Upload Exploit Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote Shell Upload Tested on : Windows XP sp3 FR » In The name of Allah Go0Gle D0rk : "Power...

Simple Machines Forum <= 1.1.12 XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: XSS PersistentSimple Machines Forum alertdocument.cookie; 0day.today 2018-04-13...

Mambo SMF 1.0.5 Remote File Inclusion

========================================================= Mambo Component comsmf 1.0.5 RFI Vulnerability ========================================================= +Title : Mambo Component comsmf 1.0.5 RFI Vulnerability +Software : SMF 1.0.5 +Vendor : http://mamboserver.com/ +Download :...

Simple Machines Forum 1.1.11 Change Administrator Password

============================================================================ | SMF 1.1.11 change Password Admin | My Home Page : WwW.HackTeacH.CoM | Founded By : ShaDow-D3v1L ============================================================================...

Simple Machines Forum (SMF) 1.1.8 - avatar Remote PHP File Execute

Simple Machines Forum SMF 1.1.8 - avatar Remote PHP File Execute Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum = 1.1.8 avatar rpfe PoC by Jose Luis Gongora Fernandez aka JosS ///vhosts/hack0wn.com/httpdocs/poc.php VICTIM: 88.25.92. info: Mozilla/5.0 X11; U; Linux i686;...

Simple Machines Forum (SMF) 1.1.8 - 'avatar' Remote PHP File Execute

Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum = 1.1.8 avatar rpfe PoC by Jose Luis Gongora Fernandez aka JosS ///vhosts/hack0wn.com/httpdocs/poc.php VICTIM: 88.25.92. info: Mozilla/5.0 X11; U; Linux i686; es-ES; rv:1.8.1.19 Gecko/20081202 Iceweasel/2.0.0.19...

SMF (Simple Machine Forum) 1.1.11 XSS Vulnerabilities

No description provided by source. || Script : SMF Simple Machine Forum 1.1.11 || Vulnerability Type : Active XSS Active Cross Site Scripting || Risk : Low || Discovered By Khashayar Fereidani || http://ircrash.com http://bugtraq.ircrash.com || Note : For use this vulnerability you need access to...

Simple Machines Forum 1.1.11 Cross Site Scripting

|| Script : SMF Simple Machine Forum 1.1.11 || Vulnerability Type : Active XSS Active Cross Site Scripting || Risk : Low || Discovered By Khashayar Fereidani || http://ircrash.com http://bugtraq.ircrash.com || Note : For use this vulnerability you need access to censor words panel . 1.First login...