Directory traversal

2019-03-0723:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.3%

JSON

Simple Machines Forum (SMF) 2.0.4 allows local file inclusion, with resultant remote code execution, in install.php via …/ directory traversal in the db_type parameter if install.php remains present after installation.

CPENameOperatorVersion
simple_machines_forumeq2.0.4

CPE	Name	Operator	Version
	simple_machines_forum	eq	2.0.4

References

hauntit.blogspot.com/2013/04/en-smf-204-full-disclosure.html