SimpleMachines

Records34All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

SimpleMachines records in CISA KEV

No SimpleMachines vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simple Machines Forum 20 records MEDIUM Smf 9 records MEDIUM Simple Machine Forum 2 records MEDIUM

Records

2 records in Simple Machine Forum · all components

TI-2005-04621 CVE-2005-4891 · GHSA-h7xj-hhqg-cp75

SQL injection in Simple Machine Forum

MEDIUM 46

Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01742 Published 2020-01-15 No fix listed CWE-89

TI-2019-08648 CVE-2019-11574 · GHSA-43rc-pcmf-f3g4

An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17.

MEDIUM 45

An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0147 Published 2020-03-20 No fix listed CWE-918

Open these records in search →

Critical	5
High	13
Medium	15
Low	1
No CVSS	0