📦

simple_forum

Vendor: yellowswordfish

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 0 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 2.80% Exploit Prob.
Latest CVE CVE-2008-7040 Aug 24

Security Vulnerability Index

Page 1 / 1
7.5 CVSS
CVE-2008-7040
Exploit Found

SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows remote attackers to execute arbitrary SQL commands via the u parameter. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.

EPSS: 2.80%