CVE-2008-6544

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.93%

Published

Mar 29, 2009

Modified

Apr 22, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBSimple Machines Forum (SMF) 1.1.4 - Multiple Remote File Inclusions

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum (SMF) 1.1.4 allow remote attackers to execute arbitrary PHP code via a URL in the (1) settings[default_theme_dir] parameter to Sources/Subs-Graphics.php and (2) settings[default_theme_dir] parameter to Sources/Themes.php. NOTE: CVE and multiple third parties dispute this issue because the files contain a protection mechanism against direct request

Weaknesses (CWE)

CWE-94

Affected Products (1)

simple_machines · simple_machines_forumvulnerable

References (12)

http://archives.neohapsis.com/archives/bugtraq/2008-03/0425.html

Exploit

http://archives.neohapsis.com/archives/bugtraq/2008-03/0426.html

Exploit

http://archives.neohapsis.com/archives/bugtraq/2008-03/0431.html

Exploit

http://osvdb.org/51301