Approved changes feed: RSS · Atom

cpe:2.3:a:simplemachines:smf:2.0:rc5:*:*:*:*:*:*

part: a version: 2.0 update: rc5

VendorSimplemachines (ed17b814-802e-5af3-8d89-bced900c1e5b)
ProductSmf (3e11becd-38d0-5e75-a9f5-97322e1ef793)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/simplemachines/smf purl2cpe 2026-06-01 10:16:19.485764

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4173 vulnerable 2026-06-08 04:59:29.785222 Details available
Cross-site request forgery (CSRF) vulnerability in Simple Machines Forum (SMF) 2.x before 2.0.1 allows remote attackers to hijack the authentication of administrators or moderators via vectors involving image files, a different vulnerability than CVE-2011-3615. NOTE: some of these details are obtained from third party information.
Published: 2011-10-24T18:00:00.000Z
Updated: 2024-09-16T19:25:53.265Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3615 vulnerable 2026-06-08 04:59:26.658987 Details available
Multiple SQL injection vulnerabilities in Simple Machines Forum (SMF) before 1.1.15 and 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via vectors involving a (1) HTML entity or (2) display name. NOTE: some of these details are obtained from third party information.
Published: 2011-10-24T17:00:00.000Z
Updated: 2024-08-06T23:37:48.639Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.