AI Score
Confidence
High
EPSS
Percentile
76.2%
LogInOut.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via vectors related to variables derived from user input in a foreach loop.
www.openwall.com/lists/oss-security/2016/06/10/7
www.openwall.com/lists/oss-security/2016/06/18/1
github.com/SimpleMachines/SMF2.1/commit/19e560b9f3e8fc6d7d9d60c1ff617b5ed5c08008#diff-513c4f9c501cbefcc14420c01848f23c
github.com/SimpleMachines/SMF2.1/issues/3522