CVE-2005-2817: Simple Machines Forum

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Simple Machines Forum (SMF) 1-0-5 and earlier supports the use of URLs for avatar images, which allows remote attackers to monitor sensitive information of forum visitors such as IP address and user agent, as demonstrated using a PHP script on a malicious server.

Affected products

• Simple Machines Simple Machines Forum: version 1.0.5 only

Published 2005-09-07. Last modified 2026-06-16.