CVE-2011-1131 The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even tho...
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The PlushSearch2 function in Search.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, uses certain cached data in a situation where a temporary table has been created, even though this cached data is intended only for situations where a temporary table has not been created, which might allow remote attackers to obtain sensitive information via a search.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| simplemachines smf | <= 1.1.12 | No fix listed |
| simplemachines smf | = 1.0 | No fix listed |
| simplemachines smf | = 1.0-beta4 | No fix listed |
| simplemachines smf | = 1.0-beta4.1 | No fix listed |
| simplemachines smf | = 1.0-beta5 | No fix listed |
| simplemachines smf | = 1.0-beta6 | No fix listed |
| simplemachines smf | = 1.0-rc1 | No fix listed |
| simplemachines smf | = 1.0-rc2 | No fix listed |
| simplemachines smf | = 1.0.1 | No fix listed |
| simplemachines smf | = 1.0.2 | No fix listed |
| simplemachines smf | = 1.0.3 | No fix listed |
| simplemachines smf | = 1.0.4 | No fix listed |
| simplemachines smf | = 1.0.5 | No fix listed |
| simplemachines smf | = 1.0.6 | No fix listed |
| simplemachines smf | = 1.0.7 | No fix listed |
| simplemachines smf | = 1.0.8 | No fix listed |
| simplemachines smf | = 1.0.9 | No fix listed |
| simplemachines smf | = 1.0.10 | No fix listed |
| simplemachines smf | = 1.0.12 | No fix listed |
| simplemachines smf | = 1.0.13 | No fix listed |
| simplemachines smf | = 1.0.14 | No fix listed |
| simplemachines smf | = 1.0.15 | No fix listed |
| simplemachines smf | = 1.0.16 | No fix listed |
| simplemachines smf | = 1.0.17 | No fix listed |
| simplemachines smf | = 1.0.18 | No fix listed |
Show 32 more
| Product | Affected versions | Fixed in |
|---|---|---|
| simplemachines smf | = 1.0.19 | No fix listed |
| simplemachines smf | = 1.0.20 | No fix listed |
| simplemachines smf | = 1.0.21 | No fix listed |
| simplemachines smf | = 1.1 | No fix listed |
| simplemachines smf | = 1.1-beta1 | No fix listed |
| simplemachines smf | = 1.1-beta2 | No fix listed |
| simplemachines smf | = 1.1-beta3 | No fix listed |
| simplemachines smf | = 1.1-beta4 | No fix listed |
| simplemachines smf | = 1.1-rc1 | No fix listed |
| simplemachines smf | = 1.1-rc2 | No fix listed |
| simplemachines smf | = 1.1-rc3 | No fix listed |
| simplemachines smf | = 1.1.1 | No fix listed |
| simplemachines smf | = 1.1.2 | No fix listed |
| simplemachines smf | = 1.1.3 | No fix listed |
| simplemachines smf | = 1.1.4 | No fix listed |
| simplemachines smf | = 1.1.5 | No fix listed |
| simplemachines smf | = 1.1.6 | No fix listed |
| simplemachines smf | = 1.1.7 | No fix listed |
| simplemachines smf | = 1.1.8 | No fix listed |
| simplemachines smf | = 1.1.9 | No fix listed |
| simplemachines smf | = 1.1.10 | No fix listed |
| simplemachines smf | = 1.1.11 | No fix listed |
| simplemachines smf | = 2.0-beta1 | No fix listed |
| simplemachines smf | = 2.0-beta2 | No fix listed |
| simplemachines smf | = 2.0-beta2.1 | No fix listed |
| simplemachines smf | = 2.0-beta3 | No fix listed |
| simplemachines smf | = 2.0-beta3.1 | No fix listed |
| simplemachines smf | = 2.0-beta4 | No fix listed |
| simplemachines smf | = 2.0-rc1 | No fix listed |
| simplemachines smf | = 2.0-rc2 | No fix listed |
| simplemachines smf | = 2.0-rc3 | No fix listed |
| simplemachines smf | = 2.0-rc4 | No fix listed |
References
- custom.simplemachines.org patch
- [oss-security] 20110222 CVE request: simple machines forum before 1.1.13 mailing-list patch
- [oss-security] 20110302 Re: CVE request: simple machines forum before 1.1.13 mailing-list patch
- www.simplemachines.org patch