Approved changes feed: RSS · Atom

cpe:2.3:a:simplemachines:simple_machines_forum:2.1:*:*:*:*:*:*:*

part: a version: 2.1 update: *

VendorSimplemachines (ed17b814-802e-5af3-8d89-bced900c1e5b)
ProductSimple Machines Forum (f3c3ca04-cf88-5c22-9cbc-680e9b7d7c94)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/simplemachines/smf2.1 purl2cpe 2026-06-01 10:16:19.407631

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-5727 vulnerable 2026-06-08 05:07:57.587074 Details available
LogInOut.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via vectors related to variables derived from user input in a foreach loop.
Published: 2017-02-09T15:00:00.000Z
Updated: 2024-08-06T01:07:59.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5726 vulnerable 2026-06-08 05:07:57.586606 Details available
Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themechanges array parameter.
Published: 2017-02-09T15:00:00.000Z
Updated: 2024-08-06T01:07:59.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4465 vulnerable 2026-06-08 05:04:46.973008 Details available
Unrestricted file upload vulnerability in the avatar upload functionality in Simple Machines Forum before 2.0.6 and 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.
Published: 2013-10-25T23:00:00.000Z
Updated: 2024-09-16T22:09:41.285Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.