critical9.8Public exploit code
CVE-2005-4891
Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Simple Machines Forum (SMF) 1.0.4 - 'modify' SQL Injection2005-06-21 · webapps · php · Verified
Impact
Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simplemachines | Simple Machine Forum | through 1.0.4 |