Lucene search

[email protected]CVE-2008-6657

HistoryApr 07, 2009 - 7:30 p.m.

CVE-2008-6657

2009-04-0719:30:00

CWE-352

[email protected]

web.nvd.nist.gov

csrf

vulnerability

simple machines forum

smf

authentication

admin hijacking

7.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.4%

JSON

Cross-site request forgery (CSRF) vulnerability in index.php in Simple Machines Forum (SMF) 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote attackers to hijack the authentication of admins for requests that install packages via the package parameter in an install2 action.

CPENameOperatorVersion
simple_machines:simple_machines_forumsimple machines simple machines forumeq1.0.11
simple_machines:simple_machines_forumsimple machines simple machines forumeq1.1.5
simple_machines:simple_machines_forumsimple machines simple machines forumeq1.1.1
simple_machines:simple_machines_forumsimple machines simple machines forumeq1.0.7
simple_machines:simple_machines_forumsimple machines simple machines forumeq1.1.4
simple_machines:simple_machines_forumsimple machines simple machines forumeq1.1_rc1
simple_machines:simple_machines_forumsimple machines simple machines forumeq1.0.5
simple_machines:simple_machines_forumsimple machines simple machines forumeq1.1.6
simple_machines:simple_machines_forumsimple machines simple machines forumeq1.1_rc3
simple_machines:simple_machines_forumsimple machines simple machines forumeq1.1_rc2

CPE	Name	Operator	Version
simple_machines:simple_machines_forum	simple machines simple machines forum	eq	1.0.11
simple_machines:simple_machines_forum	simple machines simple machines forum	eq	1.1.5
simple_machines:simple_machines_forum	simple machines simple machines forum	eq	1.1.1
simple_machines:simple_machines_forum	simple machines simple machines forum	eq	1.0.7
simple_machines:simple_machines_forum	simple machines simple machines forum	eq	1.1.4
simple_machines:simple_machines_forum	simple machines simple machines forum	eq	1.1_rc1
simple_machines:simple_machines_forum	simple machines simple machines forum	eq	1.0.5
simple_machines:simple_machines_forum	simple machines simple machines forum	eq	1.1.6
simple_machines:simple_machines_forum	simple machines simple machines forum	eq	1.1_rc3
simple_machines:simple_machines_forum	simple machines simple machines forum	eq	1.1_rc2

Rows per page:

1-10 of 141

References

osvdb.org/50071

secunia.com/advisories/32516

www.securityfocus.com/bid/32119

www.simplemachines.org/community/index.php?topic=272861.0

exchange.xforce.ibmcloud.com/vulnerabilities/46343

www.exploit-db.com/exploits/6993

7.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.4%

JSON

Related for CVE-2008-6657

prion1 cvelist1 openvas2