Lucene search

K
cve[email protected]CVE-2013-7234
HistoryApr 29, 2014 - 2:38 p.m.

CVE-2013-7234

2014-04-2914:38:47
CWE-20
web.nvd.nist.gov
22
cve-2013-7234
smf
clickjacking
x-frame-options
security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.8%

Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header.

Affected configurations

NVD
Node
simplemachinessimple_machines_forumRange1.1.9
OR
simplemachinessimple_machines_forumMatch1.0
OR
simplemachinessimple_machines_forumMatch1.0beta4
OR
simplemachinessimple_machines_forumMatch1.0beta4.1
OR
simplemachinessimple_machines_forumMatch1.0beta5
OR
simplemachinessimple_machines_forumMatch1.0beta6
OR
simplemachinessimple_machines_forumMatch1.0rc1
OR
simplemachinessimple_machines_forumMatch1.0rc2
OR
simplemachinessimple_machines_forumMatch1.0.1
OR
simplemachinessimple_machines_forumMatch1.0.2
OR
simplemachinessimple_machines_forumMatch1.0.3
OR
simplemachinessimple_machines_forumMatch1.0.4
OR
simplemachinessimple_machines_forumMatch1.0.5
OR
simplemachinessimple_machines_forumMatch1.0.6
OR
simplemachinessimple_machines_forumMatch1.0.7
OR
simplemachinessimple_machines_forumMatch1.0.8
OR
simplemachinessimple_machines_forumMatch1.0.9
OR
simplemachinessimple_machines_forumMatch1.0.10
OR
simplemachinessimple_machines_forumMatch1.0.12
OR
simplemachinessimple_machines_forumMatch1.0.13
OR
simplemachinessimple_machines_forumMatch1.0.14
OR
simplemachinessimple_machines_forumMatch1.0.15
OR
simplemachinessimple_machines_forumMatch1.0.16
OR
simplemachinessimple_machines_forumMatch1.0.17
OR
simplemachinessimple_machines_forumMatch1.0.18
OR
simplemachinessimple_machines_forumMatch1.0.19
OR
simplemachinessimple_machines_forumMatch1.0.20
OR
simplemachinessimple_machines_forumMatch1.0.21
OR
simplemachinessimple_machines_forumMatch1.0.22
OR
simplemachinessimple_machines_forumMatch1.0.23
OR
simplemachinessimple_machines_forumMatch1.1
OR
simplemachinessimple_machines_forumMatch1.1beta1
OR
simplemachinessimple_machines_forumMatch1.1beta2
OR
simplemachinessimple_machines_forumMatch1.1beta3
OR
simplemachinessimple_machines_forumMatch1.1beta4
OR
simplemachinessimple_machines_forumMatch1.1rc1
OR
simplemachinessimple_machines_forumMatch1.1rc2
OR
simplemachinessimple_machines_forumMatch1.1rc3
OR
simplemachinessimple_machines_forumMatch1.1.1
OR
simplemachinessimple_machines_forumMatch1.1.2
OR
simplemachinessimple_machines_forumMatch1.1.3
OR
simplemachinessimple_machines_forumMatch1.1.4
OR
simplemachinessimple_machines_forumMatch1.1.5
OR
simplemachinessimple_machines_forumMatch1.1.6
OR
simplemachinessimple_machines_forumMatch1.1.7
OR
simplemachinessimple_machines_forumMatch1.1.8
OR
simplemachinessimple_machines_forumMatch1.1.10
OR
simplemachinessimple_machines_forumMatch1.1.11
OR
simplemachinessimple_machines_forumMatch1.1.12
OR
simplemachinessimple_machines_forumMatch1.1.13
OR
simplemachinessimple_machines_forumMatch1.1.14
OR
simplemachinessimple_machines_forumMatch1.1.15
OR
simplemachinessimple_machines_forumMatch1.1.16
OR
simplemachinessimple_machines_forumMatch1.1.17
OR
simplemachinessimple_machines_forumMatch2.0beta1
OR
simplemachinessimple_machines_forumMatch2.0beta2
OR
simplemachinessimple_machines_forumMatch2.0beta2.1
OR
simplemachinessimple_machines_forumMatch2.0beta3
OR
simplemachinessimple_machines_forumMatch2.0beta3.1
OR
simplemachinessimple_machines_forumMatch2.0beta4
OR
simplemachinessimple_machines_forumMatch2.0rc1
OR
simplemachinessimple_machines_forumMatch2.0rc2
OR
simplemachinessimple_machines_forumMatch2.0rc3
OR
simplemachinessimple_machines_forumMatch2.0rc4
OR
simplemachinessimple_machines_forumMatch2.0rc5
OR
simplemachinessimple_machines_forumMatch2.0.1
OR
simplemachinessimple_machines_forumMatch2.0.2
OR
simplemachinessimple_machines_forumMatch2.0.3
OR
simplemachinessimple_machines_forumMatch2.0.4
OR
simplemachinessimple_machines_forumMatch2.0.5
OR
simplemachinessimple_machines_forumMatch2.0.6

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.8%

Related for CVE-2013-7234