Arbitrary file deletion

2020-01-1521:15:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.2%

JSON

There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several “co-admins” that are not trusted beyond the SMF deployment. This vulnerability allows them to read arbitrary files on the filesystem and therefore gain new privileges by reading the settings.php with the database passwords.

CPENameOperatorVersion
simple_machines_forumle2.0.3

CPE	Name	Operator	Version
	simple_machines_forum	le	2.0.3

References

www.openwall.com/lists/oss-security/2013/02/01/4