EIP-2026-112107
PRE-CVESimple Machines Forum (SMF) 1.0.13/1.1.5 - 'Destroyer 0.1' Password Reset Security Bypass
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-112107. PoCs published by Xianur0.
AI-analyzed exploit summary This Perl script targets Simple Machines Forum (SMF) with multiple attack vectors, including path disclosure, flood attacks, temporary file discovery, installed mod listing, and password recovery brute-forcing. It exploits outdated SMF versions and leverages HTTP requests to perform these actions.
Description
Simple Machines Forum (SMF) 1.0.13/1.1.5 - 'Destroyer 0.1' Password Reset Security Bypass
Exploits (1)
This Perl script targets Simple Machines Forum (SMF) with multiple attack vectors, including path disclosure, flood attacks, temporary file discovery, installed mod listing, and password recovery brute-forcing. It exploits outdated SMF versions and leverages HTTP requests to perform these actions.