CVE-2007-3309: Simple Machines Forum

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.2 allows remote attackers to execute arbitrary PHP code during (1) creation or (2) editing of a message.

Affected products

• Simple Machines Simple Machines Forum: version 1.1.2 only

Published 2007-06-21. Last modified 2026-06-16.