CVE-2013-0192 File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config.

MediumCVSS 4.9 EPSS 3.8% Public exploit

Published: 2020-02-07 15:29
Updated: 2026-06-17 02:48
Exploit status: Public exploit available

Sign in for asset impact Search another CVE

Description

File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config.

Affected products

Product	Affected versions	Fixed in
simplemachines simple machines forum	<= 2.0.3	No fix listed
SMF	= <= 2.0.3	No fix listed

References

www.openwall.com mailing-list third-party-advisory
www.openwall.com mailing-list third-party-advisory
www.openwall.com mailing-list third-party-advisory

CVSS v3.1

4.9 Medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack Vector: Network
Attack Complexity: Low
Privileges Required: High
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

All scores (2)

v3.1 4.9 · nvd@nist.gov
v2.0 4.0 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.76% (percentile 90.1)
CWE: CWE-200

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Simple Machines Forum (SMF) 1.1.10/2.0 RC2 - Multiple Vulnerabilities Exploit · Exploit Database (OffSec) · 2009-12-02