Simple Machines Forum (SMF) 1.x < 1.1.7 Multiple Vulnerabilities

Simple Machines Forum SMF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2008-6659

CVE-2008-6659 affects Simple Machines Forum (SMF) 1.x before 1.1.7 (and 1.0 before 1.0.15). The flaw is a directory traversal in index.php via theme_dir in a jsoption action, tied to Sources/QueryString.php and Sources/Themes.php, enabling remote authenticated users to configure arbitrary local f...