4 matches found
Server side request forgery (ssrf)
An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...
CVE-2019-11574
An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...
CVE-2019-11574: Server-Side Request Forgery (SSRF)
An issue was discovered in Simple Machines Forum SMF before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls...
PT-2020-9196
Name of the Vulnerable Software and Affected Versions Simple Machines Forum versions prior to 2.0.17 Description An issue was discovered in Simple Machines Forum related to Subs-Package.php and Subs.php, where user-supplied data is used directly in curl calls, leading to a Server-Side Request...