CVE-2011-1127

2011-06-2101:00:00

mitre

www.cve.org

cve-2011-1127

simple machines forum

guest access

AI Score

6.8

Confidence

Low

EPSS

0.005

Percentile

77.1%

JSON

SSI.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly restrict guest access, which allows remote attackers to have an unspecified impact via unknown vectors.

References

custom.simplemachines.org/mods/downloads/smf_patch_2.0-RC4_security.zip

www.openwall.com/lists/oss-security/2011/02/22/17

www.openwall.com/lists/oss-security/2011/03/02/4

www.simplemachines.org/community/index.php?topic=421547.0