← Database

CVE-2005-4891

CRITICAL CVSS: 9.8 Published: 2020-01-15 Modified: 2026-06-16

Description

Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements.

Affected Platforms

Simplemachines Simple Machine Forum

Weakness Type

CWE-89

References