Unrated severityNVD Advisory· Published Sep 7, 2005· Updated Apr 16, 2026
CVE-2005-2817
CVE-2005-2817
Description
Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrated using a PHP script on a malicious server.
Affected products
1- cpe:2.3:a:simple_machines:simple_machines_forum:1.0.5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5News mentions
0No linked articles in our index yet.