Simple Machines Forum SMF versions 1.1 RC2 and prior suffer from cross site scripting in index.php.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/51266/SMF1.1RC2.txt
Source: https://packetstormsecurity.com/files/51266/SMF1.1RC2.txt.html