VendorsSimple Machinessimple_machines_forum2.0.6
Vulnerabilities

Simple Machines Forum 2.0.6

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2013-7235
Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters.
Published 2014-04-29 · Modified
7.5EPSS 0.015
CVE-2013-7236
Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username.
Published 2014-04-29 · Modified
7.5EPSS 0.015
CVE-2013-7234
Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header.
Published 2014-04-29 · Modified
4.3EPSS 0.012