Vulnerability index

Browse CVEs

8 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Simple Machines Forum MEDIUM 6.1
CVE-2025-67163

A stored cross-site scripting (XSS) vulnerability in Simple Machines Forum v2.1.6 allows attackers to execute arbitrary web scripts or HTML via injec…

Mitigation only
Fix from $1,600 2025-12-18
Simple Machines Forum MEDIUM 6.1
CVE-2025-2583

A vulnerability was found in SimpleMachines SMF 2.1.4. It has been classified as problematic. This affects an unknown part of the file ManageNews.php…

No fix yet
Fix from $1,600 2025-03-21
Simple Machines Forum MEDIUM 5.4
CVE-2025-2582

A vulnerability was found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the file…

No fix yet
Fix from $1,600 2025-03-21
Simple Machines Forum HIGH 8.8
CVE-2013-7466

Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ directory traversal in th…

No fix yet
Fix from $1,950 2019-03-07
Simple Machines Forum HIGH 8.1
CVE-2013-7468

Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter.

No fix yet
Fix from $1,950 2019-03-07
Simple Machines Forum MEDIUM 6.1
CVE-2013-7467

Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter.

No fix yet
Fix from $1,600 2019-03-07
Smf MEDIUM 6.8
CVE-2011-4173

Cross-site request forgery (CSRF) vulnerability in Simple Machines Forum (SMF) 2.x before 2.0.1 allows remote attackers to hijack the authentication …

Mitigation only
Fix from $1,600 2011-10-24
Smf MEDIUM 5.1
CVE-2006-4564

SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to execute arbitrary SQL commands vi…

Mitigation only
Fix from $1,600 2006-09-06