Approved changes feed: RSS · Atom

cpe:2.3:a:simplemachines:simple_machines_forum:2.0.4:*:*:*:*:*:*:*

part: a version: 2.0.4 update: *

VendorSimplemachines (ed17b814-802e-5af3-8d89-bced900c1e5b)
ProductSimple Machines Forum (f3c3ca04-cf88-5c22-9cbc-680e9b7d7c94)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/simplemachines/smf2.1 purl2cpe 2026-06-01 10:16:19.407607

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7468 vulnerable 2026-06-08 05:05:10.419623 Details available
Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter.
Published: 2019-03-07T22:00:00.000Z
Updated: 2024-08-06T18:09:16.613Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7467 vulnerable 2026-06-08 05:05:10.419328 Details available
Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter.
Published: 2019-03-07T22:00:00.000Z
Updated: 2024-08-06T18:09:16.937Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7466 vulnerable 2026-06-08 05:05:10.419023 Details available
Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via ../ directory traversal in the db_type parameter if install.php remains present after installation.
Published: 2019-03-07T22:00:00.000Z
Updated: 2024-08-06T18:09:16.981Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7235 vulnerable 2026-06-08 05:05:08.765045 Details available
Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters.
Published: 2014-04-29T14:00:00.000Z
Updated: 2024-08-06T18:01:20.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-7234 vulnerable 2026-06-08 05:05:08.761658 Details available
Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header.
Published: 2014-04-29T14:00:00.000Z
Updated: 2024-08-06T18:01:19.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4465 vulnerable 2026-06-08 05:04:46.972497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.