Simple Machines vulnerabilities

Products

• Forum 21
• Smf 4
• Smf 2

Newest

• simple machines smf Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 2.0.2 allows remote... CVE-2012-5903 Public exploit 4.3 MediumNovember 17, 2012
• phpraider Cross-site scripting (XSS) vulnerability in an unspecified component in Simple Machines phpRaider... CVE-2008-7035 4.3 MediumAugust 24, 2009
• simple machines forum SQL injection vulnerability in Load.php in Simple Machines Forum (SMF) 1.1.4 and earlier allows... CVE-2008-6741 Public exploit 7.5 HighApril 21, 2009
• simple machines forum Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15... CVE-2008-6659 Public exploit 5.5 MediumApril 7, 2009
• simple machines forum Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15... CVE-2008-6658 Public exploit 4.0 MediumApril 7, 2009
• simple machines forum Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0... CVE-2008-6657 Public exploit 6.8 MediumApril 7, 2009
• simple machines forum ** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum (SMF)... CVE-2008-6544 Public exploitDisputed 7.5 HighMarch 30, 2009
• simple machines opencart Multiple cross-site scripting (XSS) vulnerabilities in index.php in OpenCart 0.7.7 allow remote... CVE-2008-3130 4.3 MediumJuly 10, 2008
• simple machines forum Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0... CVE-2008-3073 7.5 HighJuly 8, 2008
• simple machines forum Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP... CVE-2008-3072 7.5 HighJuly 8, 2008
• simple machines smf Simple Machines Forum (SMF), probably 1.1.4, relies on "randomly generated static" to hinder... CVE-2008-2019 Public exploit 7.5 HighApril 30, 2008
• simple machines smf shoutbox Cross-site scripting (XSS) vulnerability in sboxDB.php in Simple Machines Forum (SMF) Shoutbox 1... CVE-2008-0775 4.3 MediumFebruary 13, 2008
• simple machines smf Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows... CVE-2008-0284 4.3 MediumJanuary 15, 2008
• simple machines forum Simple Machines Forum (SMF) 1.1.4 allows remote attackers to read a message in private forums by... CVE-2007-5943 5.0 MediumNovember 14, 2007
• simple machines forum SQL injection vulnerability in Sources/Search.php in Simple Machines Forum (SMF) 1.1.3, when... CVE-2007-5646 Public exploit 6.8 MediumOctober 23, 2007
• simple machines forum ** DISPUTED ** Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.1... CVE-2007-3942 Disputed 5.8 MediumJuly 21, 2007
• simple machines forum Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.2 allows remote attackers to execute... CVE-2007-3309 7.5 HighJune 21, 2007
• simple machines forum Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization... CVE-2007-3308 7.5 HighJune 21, 2007
• simple machines forum Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote... CVE-2007-2546 6.8 MediumMay 9, 2007
• simple machines forum ** DISPUTED ** QueryString.php in Simple Machines Forum (SMF) 1.0.7 and earlier, and 1.1rc2 and... CVE-2006-7013 Disputed 7.5 HighFebruary 15, 2007
• simple machines forum Multiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1... CVE-2007-0399 Public exploit 6.0 MediumJanuary 22, 2007
• simple machines smf Cross-site scripting (XSS) vulnerability in display.php in Simple Machines Forum (SMF) 1.1 Final... CVE-2006-6375 6.8 MediumDecember 7, 2006
• simple machines forum Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows... CVE-2006-5504 4.3 MediumOctober 25, 2006
• simple machines forum Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2... CVE-2006-5503 Public exploit 4.3 MediumOctober 25, 2006
• simple machines forum Simple Machines Forum (SMF) 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset... CVE-2006-4467 7.5 HighAugust 31, 2006
• simple machines forum Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1... CVE-2006-0896 4.3 MediumFebruary 25, 2006
• simple machines forum ** DISPUTED ** NOTE: this issue has been disputed by the vendor and third parties. SQL injection... CVE-2005-4159 Disputed 7.5 HighDecember 11, 2005
• simple machines forum Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which... CVE-2005-2817 5.0 MediumSeptember 7, 2005
• simple machines smf Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.0 allows remote... CVE-2004-1996 Public exploit 4.3 MediumMay 5, 2004
• yabb, simple machines smf +1 more Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows... CVE-2004-1827 Public exploit 4.3 MediumMarch 15, 2004