CVE-2011-3615

HIGH · CVSS 7.5 EPSS 1.14%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2011-10-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2011-3615

Severity

HIGH

CVSS

7.5

EPSS

1.14%

Original NVD Description

Multiple SQL injection vulnerabilities in Simple Machines Forum (SMF) before 1.1.15 and 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via vectors involving a (1) HTML entity or (2) display name. NOTE: some of these details are obtained from third party information.