Researchers
Back
Norv
Researcher from
Simple Machines
#25092
of 60,596
11
Total CVSS
Vulnerabilities
·
2
Low
1
High
1
PT-2011-2892
2011-06-21
7.5
CVE-2011-1128
Simple Machines
Simple Machines Forum
The issue is related to the `loadUserSettings` function in Load.php, which does not properly handle invalid login attempts. This could make it easier for remote attackers to obtain access or cause a denial of service via a brute-force attack.
PT-2011-2893
2011-06-21
3.5
CVE-2011-1129
Simple Machines
Simple Machines Forum
A cross-site scripting (XSS) issue exists in the EditNews function in ManageNews.php. This could allow remote authenticated users to inject arbitrary web script or HTML via a save items action.