Pesquisadores
Voltar
Norv
Pesquisador de
Simple Machines
#25092
de 60,596
11
CVSS total
Vulnerabilidades
·
2
Baixa
1
Alta
1
PT-2011-2892
2011-06-21
7.5
CVE-2011-1128
Simple Machines
Simple Machines Forum
The issue is related to the `loadUserSettings` function in Load.php, which does not properly handle invalid login attempts. This could make it easier for remote attackers to obtain access or cause a denial of service via a brute-force attack.
PT-2011-2893
2011-06-21
3.5
CVE-2011-1129
Simple Machines
Simple Machines Forum
A cross-site scripting (XSS) issue exists in the EditNews function in ManageNews.php. This could allow remote authenticated users to inject arbitrary web script or HTML via a save items action.