Browse CVEs

HIGH 7.5 CVE-2008-6741 SQL injection vulnerability in Load.php in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by… Simple Machines Forum after 1.1.4 Fix from $1,9502009-04-21 MEDIUM 6.8 CVE-2008-6657 Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote atta… Simple Machines Forum No fix yet Fix from $1,6002009-04-07 MEDIUM 5.5 CVE-2008-6659 Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated user… Simple Machines Forum No fix yet Fix from $1,6002009-04-07 HIGH 7.5 CVE-2008-6544 Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum (SMF) 1.1.4 allow remote attackers to execute arbitrary PHP code via a UR… Simple Machines Forum No fix yet Fix from $1,9502009-03-30 HIGH 7.5 CVE-2008-3072 Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number ge… Simple Machines Forum after 1.1.4 Fix from $1,9502008-07-08 HIGH 7.5 CVE-2008-3073 Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably c… Simple Machines Forum after 1.1.4 Fix from $1,9502008-07-08 HIGH 7.5 CVE-2008-2019 Simple Machines Forum (SMF), probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the WAV file (aka audio) CAPTCHA,… Smf Mitigation only Fix from $1,9502008-04-30 MEDIUM 5.0 CVE-2007-5943 Simple Machines Forum (SMF) 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show resu… Simple Machines Forum Mitigation only Fix from $1,6002007-11-14 MEDIUM 6.8 CVE-2007-5646 SQL injection vulnerability in Sources/Search.php in Simple Machines Forum (SMF) 1.1.3, when MySQL 5 is used, allows remote attackers to execute arbi… Simple Machines Forum Patch available Fix from $1,6002007-10-23 MEDIUM 5.8 CVE-2007-3942 Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.1.3 allows remote attackers to include local files via unspecified ve… Simple Machines Forum Mitigation only Fix from $1,6002007-07-21 HIGH 7.5 CVE-2007-3308 Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows remote a… Simple Machines Forum Mitigation only Fix from $1,9502007-06-21 HIGH 7.5 CVE-2007-3309 Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.2 allows remote attackers to execute arbitrary PHP code during (1) creation or (2) editi… Simple Machines Forum Mitigation only Fix from $1,9502007-06-21 MEDIUM 6.8 CVE-2007-2546 Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESS… Simple Machines Forum after 1.1.2 Fix from $1,6002007-05-09 HIGH 7.5 CVE-2006-7013 QueryString.php in Simple Machines Forum (SMF) 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to more easily spoof the IP address… Simple Machines Forum after 1.1_rc2 Fix from $1,9502007-02-15 MEDIUM 6.0 CVE-2007-0399 Multiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1.1 RC3 allow remote authenticated users to inject ar… Simple Machines Forum Mitigation only Fix from $1,6002007-01-22 MEDIUM 6.8 CVE-2006-6375 Cross-site scripting (XSS) vulnerability in display.php in Simple Machines Forum (SMF) 1.1 Final and earlier allows remote attackers to inject arbitr… Smf Patch available Fix from $1,6002006-12-07 HIGH 7.5 CVE-2006-4467 Simple Machines Forum (SMF) 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset variables when the input data includes a numeric pa… Simple Machines Forum after 1.1_rc2 Fix from $1,9502006-08-31 HIGH 7.5 CVE-2005-4159 NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum (SMF) 1.1 … Simple Machines Forum after 1.1_rc1 Fix from $1,9502005-12-11 MEDIUM 5.0 CVE-2005-2817 Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive informat… Simple Machines Forum No fix yet Fix from $1,6002005-09-07