Simple Machines Forum
Approved changes feed: RSS · Atom
cpe:2.3:a:simple_machines:simple_machines_forum:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Simple Machines (4eae37d4-a022-553c-a57d-683a042ff410) |
|---|---|
| Product | Simple Machines Forum (5a845165-118f-56d4-95d5-257247e38a33) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/simplemachines/smf |
purl2cpe | 2026-06-01 10:13:01.059015 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-6741 |
vulnerable | 2026-06-08 04:51:04.727242 |
Details available
SQL injection vulnerability in Load.php in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by setting the db_character_set parameter to a multibyte character set such as big5, which causes the addslashes PHP function to produce a "\" (backslash) sequence that does not quote the "'" (single quote) character, as demonstrated via a manlabels action to index.php.
Published: 2009-04-21T18:07:00.000Z
Updated: 2024-08-07T11:42:00.380Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3073 |
vulnerable | 2026-06-08 04:50:32.949907 |
Details available
Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting (XSS), related to "use of the html-tag."
Published: 2008-07-08T18:00:00.000Z
Updated: 2024-08-07T09:21:35.119Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3072 |
vulnerable | 2026-06-08 04:50:32.949546 |
Details available
Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors.
Published: 2008-07-08T18:00:00.000Z
Updated: 2024-08-07T09:21:35.052Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2546 |
vulnerable | 2026-06-08 04:49:45.239925 |
Details available
Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
Published: 2007-05-09T10:00:00.000Z
Updated: 2024-08-07T13:42:33.410Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-7013 |
vulnerable | 2026-06-08 04:49:30.159642 |
Details available
QueryString.php in Simple Machines Forum (SMF) 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP header, which is preferred instead of other more reliable sources for the IP address. NOTE: the original researcher claims that the vendor has disputed this issue
Published: 2007-02-15T02:00:00.000Z
Updated: 2024-08-07T20:50:05.630Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-4467 |
vulnerable | 2026-06-08 04:49:17.984268 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4159 |
vulnerable | 2026-06-08 04:48:43.124069 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.