CVE-2007-5943 Simple Machines Forum (SMF) 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possibl...
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Simple Machines Forum (SMF) 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simple machines forum | = 1.1.4 | No fix listed |
References
- 20071108 Simple Machine Forum - Private section/posts/info disclosure mailing-list
- 26508 vdb-entry