CVE-2005-4891
CRITICALSimple Machine Forum <1.0.4 - SQL Injection
Title source: llmDescription
Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by GulfTech Security · perlwebappsphp
https://www.exploit-db.com/exploits/1057
Scores
CVSS v3
9.8
EPSS
0.0037
EPSS Percentile
58.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
simplemachines/simple_machine_forum
< 1.0.4
Published
Jan 15, 2020
Tracked Since
Feb 18, 2026