Show filters
17 Total Results
Displaying 11-17 of 17
Sort by:
Attacker Value
Unknown
CVE-2007-5646
Disclosure Date: October 23, 2007 (last updated October 04, 2023)
SQL injection vulnerability in Sources/Search.php in Simple Machines Forum (SMF) 1.1.3, when MySQL 5 is used, allows remote attackers to execute arbitrary SQL commands via the userspec parameter in a search2 action to index.php.
0
Attacker Value
Unknown
CVE-2007-3942
Disclosure Date: July 21, 2007 (last updated November 08, 2023)
Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.1.3 allows remote attackers to include local files via unspecified vectors related to the sourcedir parameter or the actionArray hash. NOTE: CVE and multiple third parties dispute this vulnerability because both sourcedir and actionArray are defined before use
0
Attacker Value
Unknown
CVE-2007-3308
Disclosure Date: June 21, 2007 (last updated October 04, 2023)
Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows remote attackers to pass the CAPTCHA test via an automated brute-force attack.
0
Attacker Value
Unknown
CVE-2007-3309
Disclosure Date: June 21, 2007 (last updated October 04, 2023)
Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.2 allows remote attackers to execute arbitrary PHP code during (1) creation or (2) editing of a message.
0
Attacker Value
Unknown
CVE-2007-0399
Disclosure Date: January 22, 2007 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Simple Machines Forum (SMF) 1.1 RC3 allow remote authenticated users to inject arbitrary web script or HTML via the (1) recipient or (2) BCC field when selecting send in a pm action.
0
Attacker Value
Unknown
CVE-2006-5503
Disclosure Date: October 25, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
0
Attacker Value
Unknown
CVE-2006-5504
Disclosure Date: October 25, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows remote attackers to inject arbitrary web script or HTML via a base64 encoded params value in the action parameter.
0
