| Package | Affected versions | Patched versions |
|---|---|---|
| simple machines forum | = 1.0.5 |
Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrated using a PHP script on a malicious server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free