Skip to contentSimple Machines Forum vulnerabilities
- simple machines forumSQL injection vulnerability in Load.php in Simple Machines Forum (SMF) 1.1.4 and earlier allows...CVE-2008-6741Public exploit7.5 High
- simple machines forumDirectory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15...CVE-2008-6659Public exploit5.5 Medium
- simple machines forumDirectory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15...CVE-2008-6658Public exploit4.0 Medium
- simple machines forumCross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0...CVE-2008-6657Public exploit6.8 Medium
- simple machines forum** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum (SMF)...CVE-2008-6544Public exploitDisputed7.5 High
- simple machines forumUnspecified vulnerability in Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0...CVE-2008-30737.5 High
- simple machines forumSimple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP...CVE-2008-30727.5 High
- simple machines forumSimple Machines Forum (SMF) 1.1.4 allows remote attackers to read a message in private forums by...CVE-2007-59435.0 Medium
- simple machines forumSQL injection vulnerability in Sources/Search.php in Simple Machines Forum (SMF) 1.1.3, when...CVE-2007-5646Public exploit6.8 Medium
- simple machines forum** DISPUTED ** Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.1...CVE-2007-3942Disputed5.8 Medium
- simple machines forumUnspecified vulnerability in Simple Machines Forum (SMF) 1.1.2 allows remote attackers to execute...CVE-2007-33097.5 High
- simple machines forumSimple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization...CVE-2007-33087.5 High
- simple machines forumSession fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote...CVE-2007-25466.8 Medium
- simple machines forum** DISPUTED ** QueryString.php in Simple Machines Forum (SMF) 1.0.7 and earlier, and 1.1rc2 and...CVE-2006-7013Disputed7.5 High
- simple machines forumMultiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1...CVE-2007-0399Public exploit6.0 Medium
- simple machines forumCross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows...CVE-2006-55044.3 Medium
- simple machines forumCross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2...CVE-2006-5503Public exploit4.3 Medium
- simple machines forumSimple Machines Forum (SMF) 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset...CVE-2006-44677.5 High
- simple machines forumCross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1...CVE-2006-08964.3 Medium
- simple machines forum** DISPUTED ** NOTE: this issue has been disputed by the vendor and third parties. SQL injection...CVE-2005-4159Disputed7.5 High
- simple machines forumSimple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which...CVE-2005-28175.0 Medium