← Back

Simple Machines Forum

simple_machines_forum

Vendor: Simple Machines • 21 CVEs

CVEs (21)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Simple Machines
1Simple Machines Forum
Apr 16, 2026
Sep 7, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrate...Show more
Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrated using a PHP script on a malicious server.Show less