VendorsSimple Machinessimple_machines_smfall versions
Vulnerabilities

Simple Machines Simple Machines Smf

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2004-1827
Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags.
Published 2005-05-10 · Modified
4.31 PoCEPSS 0.021
CVE-2008-0284
Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) Itemid or (2) topic arguments.
Published 2008-01-15 · Modified
4.3EPSS 0.010