Filtered by vendor Simplemachines Subscriptions
Filtered by product Simple Machine Forum Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-11574 1 Simplemachines 1 Simple Machine Forum 2024-11-21 9.8 Critical
An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data is used directly in curl calls.
CVE-2005-4891 1 Simplemachines 1 Simple Machine Forum 2024-11-21 9.8 Critical
Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements.
CVE-2024-7437 1 Simplemachines 2 Simple Machine Forum, Simple Machines Forum 2024-09-11 5.4 Medium
A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4. Affected is an unknown function of the file /index.php?action=profile;u=2;area=showalerts;do=remove of the component Delete User Handler. The manipulation of the argument aid leads to improper control of resource identifiers. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.