SCF Advanced Search

  • Total Members: 13496
  • Latest: Jack K
  • Total Posts: 35657
  • Total Topics: 10899
  • Online Today: 2463
  • Online Ever: 51419
  • (01. January 2010., 10:27:49)

Author Topic: Simple Machines Forum Multiple Security Vulnerabilities  (Read 1656 times)

0 Members and 1 Guest are viewing this topic.


  • SCF VIP Member
  • *****
  • Posts: 776
  • KARMA: 117
  • Gender: Male
  • Pez
Simple Machines Forum Multiple Security Vulnerabilities

This is not totaly new but from about 2015-03-25.


Simple Machines Forum is prone to multiple security vulnerabilities: - A remote PHP code-execution vulnerability - Multiple cross-site scripting vulnerabilities - Multiple cross-site request-forgery vulnerabilities - An information-disclosure vulnerability - Multiple denial-of-service vulnerabilities Attackers can exploit these issues to execute arbitrary script code within the context of the webserver, perform unauthorized actions on behalf of legitimate users, compromise the affected application, steal cookie-based authentication credentials, obtain information that could aid in further attacks or cause denial-of-service conditions. Please note some of these issues may already be described in other BIDs. This BID will be updated if further analysis confirms this. These issues affect Simple Machines Forum 2.0 RC2. Some of these issues also affect version 1.1.10.


Reportedly, the vendor fixed some of the issues in the release 1.1.11.

Their is two easy way to configure a system!
Every thing open and every thing closed.
Every thing else is more or less complex.

Start Turfing !,8405.msg21475.html#msg21475

Samker's Computer Forum -

Sponsored Links:


With Quick-Reply you can write a post when viewing a topic without loading a new page. You can still use bulletin board code and smileys as you would in a normal post.

Name: Email:
Type the letters shown in the picture
Listen to the letters / Request another image
Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters)

Enter your email address to receive daily email with ' - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising