CVE-2011-1127 SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors.
HighCVSS 10.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simplemachines smf | <= 1.1.12 | No fix listed |
| simplemachines smf | = 1.0 | No fix listed |
| simplemachines smf | = 1.0-beta4 | No fix listed |
| simplemachines smf | = 1.0-beta4.1 | No fix listed |
| simplemachines smf | = 1.0-beta5 | No fix listed |
| simplemachines smf | = 1.0-beta6 | No fix listed |
| simplemachines smf | = 1.0-rc1 | No fix listed |
| simplemachines smf | = 1.0-rc2 | No fix listed |
| simplemachines smf | = 1.0.1 | No fix listed |
| simplemachines smf | = 1.0.2 | No fix listed |
| simplemachines smf | = 1.0.3 | No fix listed |
| simplemachines smf | = 1.0.4 | No fix listed |
| simplemachines smf | = 1.0.5 | No fix listed |
| simplemachines smf | = 1.0.6 | No fix listed |
| simplemachines smf | = 1.0.7 | No fix listed |
| simplemachines smf | = 1.0.8 | No fix listed |
| simplemachines smf | = 1.0.9 | No fix listed |
| simplemachines smf | = 1.0.10 | No fix listed |
| simplemachines smf | = 1.0.12 | No fix listed |
| simplemachines smf | = 1.0.13 | No fix listed |
| simplemachines smf | = 1.0.14 | No fix listed |
| simplemachines smf | = 1.0.15 | No fix listed |
| simplemachines smf | = 1.0.16 | No fix listed |
| simplemachines smf | = 1.0.17 | No fix listed |
| simplemachines smf | = 1.0.18 | No fix listed |
Show 32 more
| Product | Affected versions | Fixed in |
|---|---|---|
| simplemachines smf | = 1.0.19 | No fix listed |
| simplemachines smf | = 1.0.20 | No fix listed |
| simplemachines smf | = 1.0.21 | No fix listed |
| simplemachines smf | = 1.1 | No fix listed |
| simplemachines smf | = 1.1-beta1 | No fix listed |
| simplemachines smf | = 1.1-beta2 | No fix listed |
| simplemachines smf | = 1.1-beta3 | No fix listed |
| simplemachines smf | = 1.1-beta4 | No fix listed |
| simplemachines smf | = 1.1-rc1 | No fix listed |
| simplemachines smf | = 1.1-rc2 | No fix listed |
| simplemachines smf | = 1.1-rc3 | No fix listed |
| simplemachines smf | = 1.1.1 | No fix listed |
| simplemachines smf | = 1.1.2 | No fix listed |
| simplemachines smf | = 1.1.3 | No fix listed |
| simplemachines smf | = 1.1.4 | No fix listed |
| simplemachines smf | = 1.1.5 | No fix listed |
| simplemachines smf | = 1.1.6 | No fix listed |
| simplemachines smf | = 1.1.7 | No fix listed |
| simplemachines smf | = 1.1.8 | No fix listed |
| simplemachines smf | = 1.1.9 | No fix listed |
| simplemachines smf | = 1.1.10 | No fix listed |
| simplemachines smf | = 1.1.11 | No fix listed |
| simplemachines smf | = 2.0-beta1 | No fix listed |
| simplemachines smf | = 2.0-beta2 | No fix listed |
| simplemachines smf | = 2.0-beta2.1 | No fix listed |
| simplemachines smf | = 2.0-beta3 | No fix listed |
| simplemachines smf | = 2.0-beta3.1 | No fix listed |
| simplemachines smf | = 2.0-beta4 | No fix listed |
| simplemachines smf | = 2.0-rc1 | No fix listed |
| simplemachines smf | = 2.0-rc2 | No fix listed |
| simplemachines smf | = 2.0-rc3 | No fix listed |
| simplemachines smf | = 2.0-rc4 | No fix listed |
References
- custom.simplemachines.org patch
- [oss-security] 20110222 CVE request: simple machines forum before 1.1.13 mailing-list patch
- [oss-security] 20110302 Re: CVE request: simple machines forum before 1.1.13 mailing-list patch
- www.simplemachines.org patch