Simplemachines Simple Machine Forum vulnerabilities
2 known vulnerabilities affecting simplemachines/simple_machine_forum.
Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL2
Vulnerabilities
Page 1 of 1
CVE-2005-4891P2CRITICALCVSS 9.8PoC≤ 1.0.42020-01-15
CVE-2005-4891 [CRITICAL] CWE-89 CVE-2005-4891: Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allow
Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements.
nvd
CVE-2019-11574P3CRITICALCVSS 9.8fixed in 2.0.172020-03-20
CVE-2019-11574 [CRITICAL] CWE-918 CVE-2019-11574: An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF related
An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls.
nvd