Browse CVEs

MEDIUM 6.8 CVE-2008-6657 Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote atta… Simple Machines Forum No fix yet Fix from $1,6002009-04-07 MEDIUM 5.5 CVE-2008-6659 Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated user… Simple Machines Forum No fix yet Fix from $1,6002009-04-07 HIGH 7.5 CVE-2008-6544 Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum (SMF) 1.1.4 allow remote attackers to execute arbitrary PHP code via a UR… Simple Machines Forum No fix yet Fix from $1,9502009-03-30 HIGH 7.5 CVE-2008-2019 Simple Machines Forum (SMF), probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the WAV file (aka audio) CAPTCHA,… Smf Mitigation only Fix from $1,9502008-04-30 MEDIUM 5.0 CVE-2007-5943 Simple Machines Forum (SMF) 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show resu… Simple Machines Forum Mitigation only Fix from $1,6002007-11-14 MEDIUM 5.8 CVE-2007-3942 Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.1.3 allows remote attackers to include local files via unspecified ve… Simple Machines Forum Mitigation only Fix from $1,6002007-07-21 HIGH 7.5 CVE-2007-3308 Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows remote a… Simple Machines Forum Mitigation only Fix from $1,9502007-06-21 HIGH 7.5 CVE-2007-3309 Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.2 allows remote attackers to execute arbitrary PHP code during (1) creation or (2) editi… Simple Machines Forum Mitigation only Fix from $1,9502007-06-21 MEDIUM 6.0 CVE-2007-0399 Multiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1.1 RC3 allow remote authenticated users to inject ar… Simple Machines Forum Mitigation only Fix from $1,6002007-01-22 MEDIUM 5.0 CVE-2005-2817 Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive informat… Simple Machines Forum No fix yet Fix from $1,6002005-09-07