Vulnerability index

Browse CVEs

10 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Simple Machines Forum MEDIUM 6.8
CVE-2008-6657

Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote atta…

No fix yet
Fix from $1,600 2009-04-07
Simple Machines Forum MEDIUM 5.5
CVE-2008-6659

Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated user…

No fix yet
Fix from $1,600 2009-04-07
Simple Machines Forum HIGH 7.5
CVE-2008-6544

Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum (SMF) 1.1.4 allow remote attackers to execute arbitrary PHP code via a UR…

No fix yet
Fix from $1,950 2009-03-30
Smf HIGH 7.5
CVE-2008-2019

Simple Machines Forum (SMF), probably 1.1.4, relies on "randomly generated static" to hinder brute-force attacks on the WAV file (aka audio) CAPTCHA,…

Mitigation only
Fix from $1,950 2008-04-30
Simple Machines Forum MEDIUM 5.0
CVE-2007-5943

Simple Machines Forum (SMF) 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show resu…

Mitigation only
Fix from $1,600 2007-11-14
Simple Machines Forum MEDIUM 5.8
CVE-2007-3942

Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.1.3 allows remote attackers to include local files via unspecified ve…

Mitigation only
Fix from $1,600 2007-07-21
Simple Machines Forum HIGH 7.5
CVE-2007-3308

Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows remote a…

Mitigation only
Fix from $1,950 2007-06-21
Simple Machines Forum HIGH 7.5
CVE-2007-3309

Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.2 allows remote attackers to execute arbitrary PHP code during (1) creation or (2) editi…

Mitigation only
Fix from $1,950 2007-06-21
Simple Machines Forum MEDIUM 6.0
CVE-2007-0399

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1.1 RC3 allow remote authenticated users to inject ar…

Mitigation only
Fix from $1,600 2007-01-22
Simple Machines Forum MEDIUM 5.0
CVE-2005-2817

Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive informat…

No fix yet
Fix from $1,600 2005-09-07