Page 2 of 28 results (0.005 seconds)

CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 1

CVE-2013-0192 – Simple Machines Forum (SMF) 1.1.10/2.0 RC2 - Multiple Vulnerabilities

https://notcve.org/view.php?id=CVE-2013-0192

File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config. Una Divulgación de Archivos en SMF (SimpleMachines Forum) versiones anteriores a 2.0.3 incluyéndola: el administrador del foro puede leer archivos tales como el database config. • https://www.exploit-db.com/exploits/10274 http://www.openwall.com/lists/oss-security/2013/01/17/5 http://www.openwall.com/lists/oss-security/2013/01/31/1 http://www.openwall.com/lists/oss-security/2013/02/01/4 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2019-12490

https://notcve.org/view.php?id=CVE-2019-12490

An issue was discovered in Simple Machines Forum (SMF) before 2.0.16. Reverse tabnabbing can occur because of use of _blank for external links. Se detectó un problema en Simple Machines Forum (SMF) versiones anteriores a 2.0.16. Un tabnabbing inverso puede presentarse debido al uso de _blank para enlaces externos. • https://www.simplemachines.org/community/index.php?topic=570986.0 https://www.youtube.com/watch?v=gCVeFoxZ1DI •

CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 1

CVE-2009-5068 – Simple Machines Forum (SMF) 1.1.10/2.0 RC2 - Multiple Vulnerabilities

https://notcve.org/view.php?id=CVE-2009-5068

There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several "co-admins" that are not trusted beyond the SMF deployment. This vulnerability allows them to read arbitrary files on the filesystem and therefore gain new privileges by reading the settings.php with the database passwords. Hay una vulnerabilidad de divulgación de archivos en SMF (Simple Machines Forum) afectando a las versiones hasta la versión v2.0.3. En algunas configuraciones un despliegue SMF es compartido por varios "co-admins" en los que no se confía más allá del despliegue SMF. • https://www.exploit-db.com/exploits/10274 http://www.openwall.com/lists/oss-security/2013/02/01/4 • CWE-312: Cleartext Storage of Sensitive Information •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 2

CVE-2005-4891 – Simple Machines Forum (SMF) 1.0.4 - 'modify' SQL Injection

https://notcve.org/view.php?id=CVE-2005-4891

Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements. Simple Machine Forum (SMF) versiones 1.0.4 y anteriores, presentan una vulnerabilidad de inyección SQL que permite a atacantes remotos inyectar sentencias SQL arbitrarias. • https://www.exploit-db.com/exploits/1057 http://www.openwall.com/lists/oss-security/2012/11/14/10 https://securiteam.com/exploits/5HP0N0KG0O • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2013-7466

https://notcve.org/view.php?id=CVE-2013-7466

Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ directory traversal in the db_type parameter if install.php remains present after installation. Simple Machines Forum (SMF), en su versión 2.0.4, permite la inclusión local de archivos con una ejecución remota de código resultante en install.php mediante el salto de directorio ../ en el parámetro db_type si install.php está presente después de la instalación. • http://hauntit.blogspot.com/2013/04/en-smf-204-full-disclosure.html • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •