Simple Machines Forum Cross-Site Scripting Vulnerabilities Jan 10 2008 02:12AM
DoZ HackersCenter com
[HSC] Simple Machines Forum XSS Vulnerabilities

Simple Machines Forum allows attackers to exploiting this vulnerability by cross-site scripting and they will be able to obtain detailed information. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Hackers Center Security Group (

Credit: Doz

Remote: YES

Class: Improper Validation.

Version: 1.1.4 & Previous!


* Attackers can exploit these issues via a web client.,com_smf/Itemid,8'XSS,1/topic,1.0/,com_smf/Itemid,5/topic,1.XSS/

Solution: upgrade to SMF 2.0 1.x when vendor releases to public.

Only becoming a hacker you can stop a hacker. Were can you learn with out having to pay thousands?- - The most comprehensive security pack you will ever find on the net!

[ reply ]


Privacy Statement
Copyright 2010, SecurityFocus